Lenovo ThinkVantage Client Security Solution 8.3 Manuale Utente Pagina 27

  • Scaricare
  • Aggiungi ai miei manuali
  • Stampa
  • Pagina
    / 86
  • Indice
  • SEGNALIBRI
  • Valutato. / 5. Basato su recensioni clienti
Vedere la pagina 26
ThefollowingdiagramprovidesthestructurefortheSystemLevelKey:
System Level Key Structure - Take Ownership
Trusted Platform Module
Encrypted via derived AES Key
Storage Root Private Key
Storage Root Public Key
System Leaf Private Key
System Base Private Key
System Leaf Public Key
System Base Public Key
System Base Private Key
System Base Public Key
If Passphrase
loop n times
CSS Admin PW/PP
One-Way Hash
One-Way Hash
System Base AES
Protection Key
(derived via output
of hash algorithm)
Auth
Figure1.SystemLevelKeyStructure-TakeOwnership
EnrollUser
Inordertohaveeachuser’sdataprotectedbythesameTrustedPlatformModule,eachuserwillhavetheir
ownuserbasekeycreated.Thisasymmetricstoragekeycanbemigratedandisalsocreatedtwiceand
protectedbyasymmetricAESKeygeneratedfromeachuser’sWindowspasswordorClientSecurity
passphrase.
ThesecondinstanceoftheUserBaseKeyisthenimportedintotheTrustedPlatformModuleandprotected
bythesystemSRK.WiththeUserBaseKeycreated,asecondaryasymmetrickeycalledtheUserLeafKey
iscreated.TheUserLeafKeyprotectsindividualsecretssuchasthePasswordManagerAESKeyusedto
protectinternetlogoninformation,passwordusedtoprotectdata,andtheWindowspasswordAESKey
usedtoprotecttheaccesstotheoperatingsystem.AccesstotheUserLeafKeyiscontrolledbytheuser’s
WindowspasswordorClientSecuritySolutionpassphraseandisautomaticallyunlockedduringlogon.
Chapter3.WorkingwithClientSecuritySolution21
Vedere la pagina 26
1 2 ... 22 23 24 25 26 27 28 29 30 31 32 ... 85 86

Commenti su questo manuale

Nessun commento