Lenovo ThinkVantage (Hardware Password Manager Deployment Manuale Utente Scaricare il pdf (Pagina 35)

Thisprocessisinitiatedautomaticallyontheclientsystembasedonpolicy,andadministratorcorporate

credentialsareobtainedfromtheHardwarePasswordManagerservertoallowtheregistrationtoproceed

unattended.

Note:One-touchreferstotheonemanualsteprequiredbytheadministratortoregisterthesystemin

HardwarePasswordManager.Whenthesystemisregisteredanddeliveredtousers,enrollmentcan

automaticallybeinitiated(basedonpolicy)foranyusersuccessfullyloggingintoWindowsonthesystem,

eitheralocalordomainlogin.Theone-touchregistrationprocessisignoredifthesystemisalready

registered.

Pre-registration

Thisprocessisthesameasthenormalregistrationprocess,exceptforthefollowingdifferences:

1.Basedonpolicy,theclientportal(whichisautomaticallylaunchedwhenloggingintoWindows)initiates

theone-touchHardwarePasswordManagerregistrationfunctionbasedontheone-touchpolicysetting.

2.Theclientportaldoesnotpromptforconrmationtoproceedwiththeregistrationandenrollment.

3.Afterrestarting,pressEnteratConrmRegistration.

4.Theclientportaldoesnotpromptforcorporate,Windows,orhardwareaccountcredentials.The

corporatecredentialsusedtoauthenticatetheregistrationrequestaretheadministrator-levelcredentials

providedbytheadministratorwhenconguringLDAPintheAdminConsole.TheWindowsand

hardwareaccountcredentialsarenotrequiredsincenouseraccountiscreated;onlythecommon

Administratoraccountisenrolled.

5.Theclientportalproceedswiththesuspendandresumeoperationwithoutnotifyingtheuser.

6.Theclientportalreturnsasuccessorfailurecodetothecallingprocessandrestartsautomatically.

Whentheone-touchregistrationprocesscompletes,thesystemispassword-protectedandasinglelocal

hardwareaccountiscreated.Thehardwareaccountissettothecommonadministratorhardwareaccount

credentials.Thesesystemscanbesafelydistributedbytheadministratortoendusersknowingthatthey

areprotectedwithhardwarepasswords.

Userenrollmentonapre-registeredsystem

Whenthesystemisdeliveredtotheuser,theusershouldperformaHardwarePasswordManagerlogin

(wirednetworkconnectionisrequired)inordertogainaccesstothesystem.Ifnonetworkconnectionis

availableortheHardwarePasswordManagerserverisbehindaVPN,theadministratorhastheoptionto

providethecommonadministratorhardwareaccountcredentialstoallowaccesstothesystem.Thisowis

thesameasthenormalEnrollAdditionalUsersow.

Chapter5.Deployment27

1 2 ... 30 31 32 33 34 35 36 37 38 39 40 ... 59 60

Nessun commento

Lenovo ThinkVantage (Hardware Password Manager Deployment Manuale Utente Pagina 35