
5.IfyouselectedWithexpiration,selectDuration,andthenselectthebeginningandendtimeforthe
accesstoHardwarePasswordManagerdevices;orselectLogincountremaining,andthenselectthe
numberoflogins;orselectNumberofdaysallowedpermachine,andthenspecifythenumberofdays.
6.ClickOK.
Toassociatedeviceswithagroup:
1.ClickHPMGroupsinthetoolbox(orclickT ools➙ThinkVantageHardwarePasswordManager➙
HPMGroups).
2.Dragthedevicefromthenetworkview(eitherfromAlldevicesorfromHardwarePasswordManager
devices-Computers)tothegroupnameintheLDAPtreeview.
3.Toviewthedevicesassociatedwithagroup,clickthegroupnameandclickViewcomputersonthe
toolbar.Toviewusersassociatedwithagroup,clickthegroupnameandclickViewLDAPUserson
thetoolbar.
ThedialogboxdisplaystheLDAPdistinguishednameofthegroupandliststhedevicesorusersassociated
withthegroup.Membersofthegroupcanlogintoalldeviceslistedhere,unlessyouhavedenedthegroup
asaServiceTechgroupwithanexpirationongroupaccess,andtheassociationhasexpired.
ManagingremoteactionsandpolicysettingsforHardwarePassword
Managerdevices
RemoteactionsarechangestoaHardwarePasswordManagerdevice’ssettingsthatareappliedtoone
ormoredevicesbytheadministrator.Actionsincludecredentialmanagement,registeringorderegistering
devices,andenrollingorremovingusers.
RemoteactionsarenotappliedimmediatelytoHardwarePasswordManagerdevices.Aftertheadministrator
appliesoneormoreremoteactionstoadevice,theactionsarependinguntilthenexttimethedeviceis
poweredon.ThedevicethenconnectstotheHardwarePasswordManagerserverandrequestsany
pendingactions.Theactionsarecompletedbytheclientandthenewsettingsareineffect.
OneremoteactionistochangepolicysettingsontheHardwarePasswordManagerdevice.Thereare
twotypesofpolicies:thoseappliedattheoperatingsystemlevel(Windowspolicies)andthoseapplied
attheBIOSlevel(BIOSpolicies).Policiesdeterminehowthedevicemanagescredentials,anddetermine
whetherregistrationanduserenrollmentareautomaticallystartedwhenthedeviceispoweredon.They
alsodeterminewhethermultipleuserscanbeenrolledonaHardwarePasswordManagerdeviceandhow
userloginishandledfortheBIOSmenu.
Whenyoumanageremoteactions,youcanapplyactionsindividuallyorglobally.WhentheRemoteActions
andPolicySettingstoolisopen,youcandragHardwarePasswordManagerdevicesfromthenetworkview
anddropthemontospecicremoteactions.Oryoucanusebuttonsonthetoolbartoapplyactionsglobally.
Remoteactionsincludethefollowing:
•RenewHardwareAccount:replacestheBIOShardwarepasswordswithanewsetofcredentialsthat
aregeneratedbytheHardwarePasswordManagerserver.Thenewcredentialsarestoredinthehardware
account,asecureareaofnon-volatilememorythatcanonlybeaccessedbythecomputer’sBIOS.
•RestoreHardwareAccount:restorestheBIOShardwarepasswordsinthehardwareaccountwiththe
backupcredentialsstoredintheHardwarePasswordManagerserver.Thisincludessystemanduser
passwordbackups.
•DeregisterPC:clearsthehardwarepasswordsandchangesthestatusintheBIOSoftheclientdevice
fromRegisteredtoEnabledandremovesthedevicefromthelistofregisteredHardwarePassword
Managerdevicesintheconsole.
Chapter3.ManagingHardwarePasswordManagerdeviceswithThinkManagementConsole13
Komentarze do niniejszej Instrukcji