Lenovo ThinkVantage (Hardware Password Manager Deployment Manual de usuario Pagina 25

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 60
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 24
Changingserverpolicysettings
Serverpolicysettingsincludevariouswaystomanageuserenrollment,credentials,andclientportaland
BIOSsettingsfortheLenovoHardwarePasswordManagerdevicesyoumanage.Thesettingsarechanged
fromtheThinkManagementconsole;itemsthataffectindividualdevicesarethenheldinapendingqueue
untilthenexttimeeachdeviceisbootedandrequestsanupdatedpolicy.
Tochangeserverpolicysettings:
1.ClickRemoteActionsandPolicySettingsinthetoolboxorclickT oolsThinkVantageHardware
PasswordManagerRemoteActionsandPolicySettings.
2.ClickUpdateServerPolicySettingsonthetoolbar.
3.Makechangesonthefourtabsinthedialogbox,andthenclickOKwhenyouhavenished.
ThetabsintheServerPolicySettingsdialogboxaredescribedasbelow.
General-Thistabliststhename,IPaddress,andUDPportoftheHardwarePasswordManagerserver
usedtoauthenticateHardwarePasswordManagerusers.TheStatusofPortalServicesectionshows
whethertheportalserviceontheHardwarePasswordManagerserverisrunning.Theportalservice
isaUDPserver,oneofthecomponentsontheHardwarePasswordManagerserver.Itisusedfor
communicationwiththeHardwarePasswordManagerdeviceBIOSwhentheuserlogsonusingthe
intranetaccountlogin.Youcanstart,stop,orrestarttheserviceasneededfromthisdialogbox.
SelectAllowuserstoenrollonmultipledevicesifyouwanttoalloweachintranetaccounttoenroll
onmultipleHardwarePasswordManagerdevices.Ifthischeckboxiscleared,oneintranetaccount
canonlybeenrolledononedevice.
SelectEnableone-touch”registrationifyouwanttopre-registernewHardwarePasswordManager
deviceswithone-touchfeaturesfromLenovo.One-touchregistrationautomaticallyregistersthedevice
andcreatestheemergencyadminaccountwhentheuserlogsintoWindows.SeealsoChapter5
“Deployment”onpage25
.
SelectEnablerstuserloggedonamachineasadministratorifyouwanttherstenrolleduserto
haveadministratorprivilegesintheBIOS.
Credentials-Thistabdeterminesthelengthofauto-generatedpasswordsandthenumberofpassword
backupstokeep.BackupsareencryptedandstoredintheHardwarePasswordManagerdatabase.
Bydefault,auto-generatedhardwarepasswords,aswellasemergencyadminaccountpasswords,
arebetween15and20characterslong.Youcanchangetheminimumandmaximumnumbersfor
bothtypesofpasswords.Youcanalsospecifyhowmanybackupstosaveforhardwarepasswords.
Themaximumpasswordlengthis64.
ClientPortal-ThistabspecieswhichmenuitemsareenabledfordisplayontheClientPortalmenuon
managedHardwarePasswordManagerdevices.TheuseraccessestheportalfromtheWindowsStart
menu(StartAllProgramsThinkVantageHardwarePasswordManager).TheClientPortal
menuitemsarealwaysselected.WhenyouperformtaskssuchasRemoveUserafteryouenterthe
intranetcredentialsthatcorrelatetotheUser,ServiceTech,andAdministratorroles,youwillgetanerror
messageifyoudonothavetheclientportalrights.UserslogintoHardwarePasswordManagerdevices
withanassignedrole,whichcorrelatestotheusergroupthattheuserbelongsto.(See“Managing
HardwarePasswordManagergroups”onpage12
foradescriptionofroles.)So,forexample,auser
mightseealloptionsontheClientPortalbutaServiceTechmighthavealimitedsetofoptionsavailable.
Ifausertriesanoptionthatisnotselectedforthatrole,anerrormessagewillbedisplayed.
BIOS-ThistabspecieswhichmenuitemsareenabledfordisplayontheBIOSmenuofmanaged
HardwarePasswordManagerdevices,andallowsyoutospecifywhichBIOSversionsareexcludedfrom
HardwarePasswordManagerdevicemanagement.BIOSmenuitemsareselectedseparatelyforthethree
userroles:User,ServiceTech,andAdministrator.UserslogintoHardwarePasswordManagerdevices
withanassignedrole,whichcorrelatestotheusergroupthattheuserbelongsto.(See“Managing
Chapter3.ManagingHardwarePasswordManagerdeviceswithThinkManagementConsole17
Vista de pagina 24
1 2 ... 20 21 22 23 24 25 26 27 28 29 30 ... 59 60

Comentarios a estos manuales

Sin comentarios