Lenovo ThinkVantage (Hardware Password Manager Deployment Instrukcja Użytkownika Pobierz pdf (Strona 9)

Chapter1.Overview

TheLenovoHardwarePasswordManager(HPM)givesanadministratortheabilitytomanagehardware

passwordsforallregisteredPCdevices.Further,itcreatesthenotionofaBIOS-leveluserIDandpassword

fortheendusertouseasasinglesign-onproxy.ThisuserIDandpasswordcanbesynchronizedwiththe

WindowsIDandpasswordfortheuser.TheuseralsohastheoptiontoauthenticatehimselftoBIOSusing

hisngerprint.Whenthedevicepowerson,theuserisaskedforthesecredentials.Ifprovided,thedevice

willlogintheusertohisdesktop.Thismechanismpreservestheuser'sprivacyandmakesitpossibleforhim

tousethedevice,eventhoughhedoesnotknowwhattheactualhardwarepasswordsare.

WhenHPMisinstalled,theLenovoThinkManagementConsolecoreserveractsastheHPMserver—it

managesandauthenticatesHPMdevices.Inaddition,anActiveDirectoryoreDirectoryLDAPserver

functionsastheauthenticationserverforHardwarePasswordManager—theHPMserverchecksuser

credentialsagainstdataontheLDAPserver.

OnLenovoclientdeviceswhichsupportHPM,theadministratorinstallsanagentthatcontainsaHardware

PasswordManagerapplication.Whentheclientdevicepowerson,itcommunicatesthroughUDPport

50001withtheHPMserver.

Aftertheclienthasbootedtotheoperatingsystem,itusestheHardwarePasswordManagerclientapplication

tocommunicatewithaWebserviceontheserver.ThiscommunicationisthroughanHTTPSchannel.

TheadministratorusestheHPMfeaturesintheThinkManagementConsoletomanageHPMdevicesand

createanddeploypoliciestothesedevices.ThesepoliciesdeterminehowHardwarePasswordManager

isimplementedforthedevices;forexample,theadministratorselectswhichuseroptionsareavailable

onHPMdevicesaspartofthepolicydenition.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 ... 59 60

Brak uwag

Lenovo ThinkVantage (Hardware Password Manager Deployment Instrukcja Użytkownika Strona 9