Lenovo ThinkVantage Client Security Solution 8.3 Manual de usuario Pagina 27

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 86
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 26
ThefollowingdiagramprovidesthestructurefortheSystemLevelKey:
System Level Key Structure - Take Ownership
Trusted Platform Module
Encrypted via derived AES Key
Storage Root Private Key
Storage Root Public Key
System Leaf Private Key
System Base Private Key
System Leaf Public Key
System Base Public Key
System Base Private Key
System Base Public Key
If Passphrase
loop n times
CSS Admin PW/PP
One-Way Hash
One-Way Hash
System Base AES
Protection Key
(derived via output
of hash algorithm)
Auth
Figure1.SystemLevelKeyStructure-TakeOwnership
EnrollUser
Inordertohaveeachuser’sdataprotectedbythesameTrustedPlatformModule,eachuserwillhavetheir
ownuserbasekeycreated.Thisasymmetricstoragekeycanbemigratedandisalsocreatedtwiceand
protectedbyasymmetricAESKeygeneratedfromeachuser’sWindowspasswordorClientSecurity
passphrase.
ThesecondinstanceoftheUserBaseKeyisthenimportedintotheTrustedPlatformModuleandprotected
bythesystemSRK.WiththeUserBaseKeycreated,asecondaryasymmetrickeycalledtheUserLeafKey
iscreated.TheUserLeafKeyprotectsindividualsecretssuchasthePasswordManagerAESKeyusedto
protectinternetlogoninformation,passwordusedtoprotectdata,andtheWindowspasswordAESKey
usedtoprotecttheaccesstotheoperatingsystem.AccesstotheUserLeafKeyiscontrolledbytheuser’s
WindowspasswordorClientSecuritySolutionpassphraseandisautomaticallyunlockedduringlogon.
Chapter3.WorkingwithClientSecuritySolution21
Vista de pagina 26
1 2 ... 22 23 24 25 26 27 28 29 30 31 32 ... 85 86

Comentarios a estos manuales

Sin comentarios