
3.RuntheThinkManagementConsoleAutorun.exefromthelocationwheretheinstallationpackagewas
extractedto.SelectInstallonthecoreserver.FollowthepromptsintheInstallationwizardand
selectRestartNowafterinstallation.
4.ActivatethecoreserverbyenteringyourLANDeskcontactnameandpasswordintheCoreServer
ActivationUtility(internetconnectionrequired).
5.ConguretheLDAPServer:
a.ConnecttheHARDWAREPASSWORDMANAGERserverandLDAPAuthenticationservertonetwork.
b.LaunchtheThinkManagementConsole.
c.Inthetoolbox,thereisaThinkVantageHardwarePasswordManagergroupwiththreeitems:HPM
EnrolledUsers,HPMGroups,andRemoteActionsandPolicySettings.ClickHPMGroupsandthen
clickCongureLDAPserver(thethirdbutton)onthetoolbar.
d.EntertheinformationfortheLDAPserverthatwillserveastheauthenticationserver.Thefollowing
itemsneedtobedenedfortheLDAPserver:
•Hostname:ThenameoftheLDAPserver.
•Port:Theportnumbertocommunicatewiththeserver.Thedefaultportis389forMicrosoft
ActiveDirectory.IfyouneedtoqueryaglobalcatalogtoaccessmultipleActiveDirectory
domains,changetheportto3268.IfyouselectNovelleDirectoryasyourLDAPserver,the
defaultportis636.
•Servertype:Selectthetype,eitherMicrosoftActiveDirectoryorNovelleDirectory.
•Encryptiontype:Selectthetypeofencryptionusedforcommunicationwiththeserver.
•Authorizeduser:
–TheusernameforloggingintotheMicrosoftActiveDirectoryserver.
–Adomain\usernameorsimplyausername.
–TheusernameforloggingintoaNovelleDirectoryserver.
Note:Itisbettertousecn=adminname,o=admincontext.IfBindRestrictionsissettoNone,
adminname.admincontextwillwork.IfBindRestrictionsissettoDisallowanonymoussimple
bind,adminname.admincontextwillnotwork.
–Password:ThepasswordfortheauthorizeduserontheLDAPserver.
e.ClickOKwhentheinformationiscomplete.
ThinkManagementConsolecoreserversetupcompletesnow.
MigratingtoanewLDAPserver
YoumayndthatyouneedtochangetheIPaddressorhostnameofyourLDAPserver.Youmayalsoneed
tochangetoanewserverwithadifferentIPaddress,orevenchangetoadifferenttypeofLDAPserver.
Ifanyofthesechangesoccurs,youneedtocreateanewLDAPserverconguration.Todothis,repeatthe
LDAPcongurationtaskinstep5.ItisrecommendedthatexistingregisteredHPMdevicesbederegistered
andthenregisteredonceagainwiththenewLDAPconguration.Otherwise,thedevicesregisteredwiththe
oldLDAPcongurationwillnotbeabletoperformvariousHPMactionssuchasanintranetaccountlogin.
InstallingHardwarePasswordManageronaLenovodevice
ToaddHardwarePasswordManagerfeaturestoaLenovodevice,youmustdeployanHPMagenttothe
device.Youcandothisbyusingeitherapushorapullmethod.
TodeployanagentwithHardwarePasswordManagerclientfeatures:
6HardwarePasswordManagerDeploymentGuide
Comentarios a estos manuales