Lenovo ThinkPad Twist S230u Quick reference guide

PasswordManager4
DeploymentGuide

Note:Beforeusingthisinformationandtheproductitsupports,readthegeneralinformationinAppendixA
“Notices”onpage13.
FirstEdition(September2012)
©CopyrightLenovo2012.
LIMITEDANDRESTRICTEDRIGHTSNOTICE:IfdataorsoftwareisdeliveredpursuantaGeneralServicesAdministration
“GSA”contract,use,reproduction,ordisclosureissubjecttorestrictionssetforthinContractNo.GS-35F-05925.

Contents
Preface..................ii
Chapter1.Overview...........1
Chapter2.Installation..........3
Installationrequirements............3
Custompublicproperty............3
Upgradeandcompatibility...........3
Manualupgrade.............4
Autoupgrade..............5
Chapter3.Commandlinetool.....7
Chapter4.ActiveDirectorysupport..9
Deningmanageablesettings..........9
Authenticationpolicies...........10
Userinterfacepolicies............10
AppendixA.Notices..........13
Trademarks................14
©CopyrightLenovo2012i

Preface
InformationpresentedinthisguideistosupportLenovo®computersinstalledwiththeThinkVantage®
PasswordManager4program(hereafterrefertoasPasswordManager).
ThisguideisintendedforITadministrators,orthoseresponsiblefordeployingPasswordManager4
throughouttheirorganizations.Ifyouhavesuggestionsorcomments,communicatewithyourLenovo
authorizedrepresentative.Thisguideisupdatedperiodically,andyoucancheckthelatestversiononthe
LenovoWebsiteathttp://www.lenovo.com/support.
ForquestionsandinformationaboutusingPasswordManager,refertothePasswordManagerhelpsystem.

Chapter1.Overview
ThischapterprovidesanoverviewofPasswordManager4.PasswordManagerenablesyoutomanage
easy-to-forgetaccountinformationforaccessingandmanagingapplicationsandWebsites,suchasuser
IDs,passwords,andotherpersonalinformation.PasswordManagerprotectsyourpersonalinformationso
thattheaccesstoyourapplicationsandWebsitesremainsecure.PasswordManageralsosavesyoutime
andeffortbecauseyouonlyhavetoremembertheWindowspasswordorprovideyourngerprint.
PasswordManagerenablesyoutoperformthefollowing:
•EncryptallstoredinformationthroughtheWindowsCAPI
PasswordManagerautomaticallyencryptsallofyourinformationthroughWindowsComputerAssisted
PersonalInterviewing(CAPI).Yoursensitivepasswordinformationissecuredby256-bitkeyAdvanced
EncryptionStandard(AES)withMicrosoft®CryptoAPI.
•AutolluserIDsandpasswords
PasswordManagerautomatesyourloginprocesswhenyouaccessanapplicationoraWebsite.Ifyour
logoninformationhasbeenstoredintoPasswordManager,PasswordManagercanautomaticallyllin
therequiredeldsandenableyoutologintotheWebsiteorapplication.
•EditentriesusingthePasswordManagerinterface
PasswordManagerenablesyoutoedityouraccountentriesandsetupalloptionalfeaturesinone
easy-to-useinterface.Thisinterfacemakesmanagingyourpasswordsandpersonalinformationquick
andeasy.Atthesametime,mostentry-relatedchangescanbedetectedautomaticallybyPassword
Manager,whichenablestheusertoupdatetheirentrieswithlesswork.
•Saveyourinformationwithoutanyextrasteps
PasswordManagercanautomaticallydetectwhensensitiveinformationisbeingsenttoaWebsiteoran
application.Whenthedetectionismade,PasswordManagerpromptstheusertosavetheinformation,
thussimplifyingtheprocessofstoringsensitiveinformation.
•Saveanyinformationintoasecurenote
WithPasswordManager,youcansaveanytextualdatainsecurenotes.Thesecurenotescanbe
protectedwiththesamelevelofsecurityasanyoftheotherWebsiteorapplicationentries.
•Exportandimportlogoninformation
PasswordManagerenablesyoutoexportyoursensitivepersonalinformationsothatyoucansecurely
carryitfromonecomputertoanother.WhenyouexportyourlogoninformationfromPasswordManager,
apassword-protectedexportlethatcanbestoredonremovablemediaiscreated.Y oucanusethis
exportletoaccessyourpersonalinformationanywhereyougo,ortoimportyourentriesintoanother
computerwithPasswordManager.
©CopyrightLenovo20121

2PasswordManager4DeploymentGuide

Chapter2.Installation
ThischapterprovidesinstructionsforinstallingPasswordManager.
BeforeinstallingPasswordManager,itisrecommendedthatyouunderstandthearchitectureoftheprogram.
ThischapterexplainsthearchitectureofPasswordManager,andprovidesadditionalinformationthat
youneedbeforeinstallingtheprogram.
ThePasswordManagersetuppackagewasdevelopedasaBasicMSIprojectusingInstallShield.
InstallShieldusestheWindowsInstallertoinstallapplications,whichgivesadministratorsmanycapabilities
tocustomizeinstallations,suchassettingpropertyvaluesfromthecommandline.Thischapterdescribes
waystouseandexecutethePasswordManagersetuppackage.Forabetterunderstanding,readtheentire
chapterbeforeyoubegintoinstallthepackage.
Installationrequirements
ThistopicexplainsthesystemrequirementsforinstallingthePasswordManagersetuppackage.Forbest
results,gotothefollowingWebsitetoensurethatyouhavethelatestversion:
http://support.lenovo.com/en_US/downloads/detail.page?LegacyDocID=MIGR-61432
Lenovo-brandedcomputersmustmeetorexceedthefollowingrequirementstoinstallPasswordManager:
•Operatingsystem:MicrosoftWindows8orWindows7(.NETFramework3.5oralaterversionisrequired)
•Memory:256MB
–Insharedmemorycongurations,theBIOSsettingformaximumsharedmemorymustbesettono
lessthan8MB.
–Innon-sharedmemorycongurations,120MBofnon-sharedmemoryisrequired.
•300MBoffreespaceonyourharddiskdrive
•VGA-compatiblevideothatsupportsaresolutionof800by600pixelsand24-bitcolor
•TheusermusthaveadministrativeprivilegestoinstallPasswordManager.
Custompublicproperty
ThePasswordManagersetuppackagecontainsacustompublicpropertythatcanbesetonthecommand
linewhenrunningtheinstallation.ThefollowingtableexplainsthecustompublicpropertyfortheWindows
operatingsystems.
Table1.Custompublicproperty
PropertyDescription
CREATESHORTCUTSetCREATESHORTCUT=1onthecommandlinetoaddanentrytotheStartmenu.
Upgradeandcompatibility
IfyouaregoingtoinstallPasswordManager4onacomputerwithPasswordManager3orClientSecurity
Solutioninstalled,amessagewillbedisplayedindicatingthattheupgradeisnotsupported.Y ouwillbe
promptedtomanuallyexportyourdatatoapassword-protectedexportleandthenuninstallPassword
Manager3orClientSecuritySolutionfromyourcomputer.AfteryouinstallPasswordManger4,youcan
manuallyimportyourdataintoPasswordManager4usingtheexportle.
©CopyrightLenovo20123

IfyouaregoingtoinstallPasswordManager3orClientSecuritySolutiononacomputerwithPassword
Manager4installed,anerrorwillbedisplayedandtheinstallationwillbestopped.
Manualupgrade
ThistopicprovidesinstructionsonhowtomanuallyinstallPasswordManager4onacomputerwith
PasswordManager3orClientSecuritySolutioninstalled.
TomanuallyinstallPasswordManager4,dothefollowing:
1.Exportyourpasswordentrylist.
a.Logintoyourcomputerwiththeuseraccountinwhichyourpasswordentrylisthasbeensaved.
b.LaunchPasswordManager3orClientSecuritySolutioninstalledonyourcomputer.
c.ClickImport/Exportonthemenubar,andselectExportEntryList.
d.Providethelename,andsaveitasanEXEleoraPWMle.
e.Enterapasswordtoprotecttheexportle.
Notes:
•TheEXEleisaportableexportle.Youcanbrowseyoursavedpasswordentrylistbyrunning
theEXElewithoutinstallingPasswordManager.YoucanuseeithertheEXEleorthePWMle
toimportyourpasswordentrylistintoPasswordManager4.
•Ifthereareotheruseraccountsonthiscomputer,logintoeachuseraccountandrepeatthe
abovestepstoexportthepasswordentrylists.
2.UninstallPasswordManager3orClientSecuritySolution.
a.ClickUninstallaprogramfromControlPanel.
b.Double-clickClientSecurity-PasswordManager,andclickUninstall.
c.Followtheinstructionsonthescreentocompletetheuninstallprocess,andrestartyourcomputer.
3.InstallPasswordManager4.
a.Goto:
http://support.lenovo.com/en_US/downloads/detail.page?LegacyDocID=MIGR-61432
b.GotothePasswordManagersectionandclicktheversionlink.
c.OpenthePasswordManagerreadmeleandfollowtheinstructionsintheletoinstalltheprogram.
d.Restartyourcomputer.
4.Importyourpasswordentrylist.
a.LaunchPasswordManager4.
b.ClickImport/Exportonthemenubar.TheImport/Exportwizardstarts.
c.ClickImportpasswordsfromaback-upleandclickNext.
d.TypetheexportlenameorclickBrowsetolocateandselecttheexportle.ClickNext.
e.SelectMergewithexistingpasswordsorOverwriteexistingpasswordsdependingonyour
needs.
f.ClickNext.Then,typethepasswordthatprotectsyourexportleintheEnterthepasswordeld.
g.ClickFinish.Amessageisdisplayedtoindicatethatyourlogoninformationhasbeenimported
successfully.ClickOKtoclosetheImport/Exportwizard.
Notes:IfyouforgettoexportthepasswordentrylistbeforeupgradingtoPasswordManager4,dothe
following:
1.UninstallPasswordManager4.
2.InstallPasswordManager3orClientSecuritySolution.
4PasswordManager4DeploymentGuide

3.FollowtheinstructionsinthistopictoexportyourpasswordentrylistfromPasswordManager3or
ClientSecuritySolutionandthenimportitintoPasswordManager4.
Autoupgrade
ThistopicprovidesinstructionsonhowtoautomaticallyinstallPasswordManager4onacomputerwith
PasswordManager3orClientSecuritySolutioninstalled.
Note:Thefollowingprocedurecanmigratethepasswordentriesoftheurrentlogged-inuseronly.
ToautomaticallyinstallPasswordManager4,dothefollowing:
1.DownloadtheAutoUpgradeToolpackagefromthefollowingLenovoSupportWebsite:
http://support.lenovo.com/en_US/downloads/detail.page?LegacyDocID=MIGR-61432
2.Double-clickthedownloadedpackage.
3.Followtheinstructionsonthescreentocompletetheupgrade.
Chapter2.Installation5

6PasswordManager4DeploymentGuide

Chapter3.Commandlinetool
PasswordManagerfeaturesalsocanbeimplementedlocallyorremotelybycorporateITadministrators
throughthecommand-lineinterface.Thischapterprovidesinformationaboutthecommandlinetool.
Import/Exportpassworddatabasele
Usethefollowingcommandtoimportandexportpasswordentries:
"C:\ProgramFiles<x86>\Lenovo\PasswordManager\pwm_utility.exe"/?
Thefollowingtableexplainstheparameters.
ParametersResults
/hor/?Displaythehelpmessage
FilePathSpecifythelenameandlepathofthepassworddatabasetobeimportedorexported
/eExportthepassworddatabasele
/iImportthepassworddatabasele
passwordSpecifythepasswordforthepassword-protecteddatabasele
mergeMergetheimportedpassworddatabaserecordwithexistingpasswordentries.
Thefollowingcommandisanexampleshowinghowtoimportthepassworddatabasele
mypassword_upgrade.pwmwithaprotectedpasswordas123456:
pwm_utility.exe/ilepath="%temp%\mypassword_upgrade.pwm"password="123456"
Note:ThepassworddatabaseleexportedfromPasswordManager3orClientSecuritySolutioncanbe
importedintoPasswordManager4.However,thepassworddatabaseleexportedfromPasswordManager
4cannotbeimportedintoPasswordManager3orClientSecuritySolution.
©CopyrightLenovo20127

8PasswordManager4DeploymentGuide

Chapter4.ActiveDirectorysupport
TheADM(Administrative)templateledenespolicysettingsusedbyapplicationsonclientcomputers.
Policiesarespecicsettingsthatgoverntheapplicationbehavior.Policysettingsalsodenewhetherthe
userwillbeallowedtosetspecicsettingsthroughtheapplication.
Settingsdenedbyanadministratorontheserveraredenedaspolicies.Settingsdenedbyauseronthe
clientcomputerforanapplicationaredenedaspreferences.AsdenedbyMicrosoft,policysettingstake
precedenceoverpreferences.Forexample,ausermightputabackgroundimageonthedesktop.Thisis
auserpreference.Anadministratormightdeneasettingontheserverdictatingthatausermustusea
specicbackgroundimage.Theadministrator’spolicysettingoverridestheuserpreference.
WhenaThinkVantageprogramchecksforasetting,itlooksforthesettinginthefollowingorder:
•Computerpolicies
•Userpolicies
•Defaultuserpolicies
•Computerpreferences
•Userpreferences
•Defaultuserpreferences
Asdescribedpreviously,allpolicies,includingcomputerpoliciesanduserpolicies,aredenedbythe
administrator.ThesesettingscanbeinitializedthroughtheXMLcongurationleorthroughaGroupPolicy
inActiveDirectory.Computeranduserpreferencesaresetbytheuserontheclientcomputerthrough
optionsintheapplicationinterface.DefaultuserpreferencesareinitializedbytheXMLcongurationscript.
Usersdonotchangethevaluesdirectly.Changesmadetothesesettingsbyauserwillbeupdatedinthe
userpreferences.CustomersnotusingActiveDirectorycancreateadefaultsetofpolicysettingstobe
deployedtoclientcomputers.AdministratorscanmodifyXMLcongurationscriptsandspecifythattheybe
processedduringtheinstallationoftheprogram.
Deningmanageablesettings
YoucansetthePasswordManagerpoliciesintheGroupPolicyeditor.Thefollowingexampleshowsthe
locationwhereyoucanndtheFingerprintFrequencyoptionintheGroupPolicyeditor.
Example:
ComputerConguration➙AdministrativeTemplates➙ThinkVantage➙PasswordManager➙
AuthenticationPolicies➙FingerprintFrequency
TheADMlesindicatewhereintheregistrythesettingswillbereected.Thesesettingswillbeinthe
followingregistrylocations:
SettingsRegistrylocations
ComputerpoliciesHKLM\Software\Policies\Lenovo\PasswordManager\
UserpoliciesHKCU\Software\Policies\Lenovo\PasswordManager\
DefaultuserpoliciesHKLM\Software\Policies\Lenovo\PasswordManager\Userdefaults
ComputerpreferencesHKLM\Software\Lenovo\PasswordManager\
©CopyrightLenovo20129

SettingsRegistrylocations
UserpreferencesHKCU\Software\Lenovo\PasswordManager\
DefaultuserpreferencesHKLM\Software\Lenovo\PasswordManager\Userdefaults
Authenticationpolicies
YoucansettheauthenticationpoliciesinthefollowingdirectoryintheGroupPolicyeditor:
•Forcomputerpolicies:ComputerConguration➙Administrativetemplates➙ThinkVantage➙
PasswordManager➙Authenticationpolicies
•Foruserpolicies:UserConguration➙Administrativetemplates➙ThinkVantage➙Password
Manager➙Authenticationpolicies
Thefollowingtableprovidesvaluesandsettingsfortheprecedingauthenticationlevels.
Table2.Authenticationpolicysettings
PolicyDescription
FingerprintFrequencyControlswhetherngerprintisrequired.
YoucansetthefrequencytoeitherEverytimeorOnceperlogon.
OverrideDenesback-upauthenticationrequirementsifthenormalauthenticationfails.
Userinterfacepolicies
YoucansettheuserinterfacepoliciesinthefollowingdirectoryintheGroupPolicyeditor:
•Forcomputerpolicies:ComputerConguration➙Administrativetemplates➙ThinkVantage➙
PasswordManagerUserinterface
•Foruserpolicies:UserConguration➙Administrativetemplates➙ThinkVantage➙Password
ManagerUserinterface
Thefollowingtableprovidespolicysettingsfortheuserinterface.
Table3.Userinterfacepolicysettings
PolicyDescription
ImportExportoptionShow,gray,orhidetheImport/ExportbuttoninPasswordManager.
Default:Show
Note:ApplicableonPasswordManager4.0oralaterversion
SettingsoptionShow,gray,orhidetheSettingsbuttoninPasswordManager.
Default:Show
Note:ApplicableonPasswordManager4.0oralaterversion
GeneraltaboptionShow,gray,orhidetheGeneralsettingspageinPasswordManager.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
10PasswordManager4DeploymentGuide

Table3.Userinterfacepolicysettings(continued)
PolicyDescription
RestrictedWebsitestaboptionShow,gray,orhidetheRestrictedsitesoptioninPasswordManager.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
RestrictedapplicationstaboptionShow,gray,orhidetheRestrictedapplicationsoptioninPasswordManager.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
AuthenticationtaboptionShow,gray,orhidetheAuthenticationoptioninPasswordManager.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
AdvancedtaboptionShow,gray,orhidetheAdvancedoptioninPasswordManager.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
IESupportoptionShow,gray,orhidetheoptiontoenableordisableInternetExplorer®supportin
theSettingswindows.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
FirefoxsupportoptionShow,gray,orhidetheoptiontoenableordisableFirefoxsupportinthe
Settingswindow.
Default:Show
ChromesupportoptionShow,gray,orhidetheoptiontoenableordisableGoogleChromesupportin
theSettingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
WindowsapplicationsupportoptionShow,gray,orhidetheoptiontoenableordisableWindowsapplication
supportintheSettingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
AutolloptionShow,gray,orhidetheoptiontoselectdomainorURLauto-llintheSettings
window.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
Chapter4.ActiveDirectorysupport11

Table3.Userinterfacepolicysettings(continued)
PolicyDescription
NumberofshortcutsoptionShow,gray,orhidethelistboxforsettingthenumberofWebsiteshortcutsin
theSettingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
AddrestrictedURLoptionShow,gray,orhidetheeditboxandbuttonforaddingrestrictedURLinthe
Settingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
RemoverestrictedURLoptionShow,gray,orhidethebuttonforremovingrestrictedURLsintheSettings
window.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
Alwayspromptforauthentication
option
Show,gray,orhidetheAlwayspromptforauthenticationcheckboxinthe
Settingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
Optionforenablingpassworduseif
ngerprintreaderisnotworking
Show,gray,orhidethecontrolsforenablingpassworduseifthengerprint
readerisnotworkingintheSettingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
Enable/DisablePasswordManager
option
Show,gray,orhidetheoptiontoenableordisablePasswordManagerinthe
Settingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
ClearpasswordsoptionShow,gray,orhidetheClearpasswordsbuttonintheSettingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
ResetsettingsoptionShow,gray,orhidetheResetsettingsbuttonintheSettingswindow.
Default:Show
Note:ApplicableonPasswordManager4.1oralaterversion
12PasswordManager4DeploymentGuide

AppendixA.Notices
Lenovomaynotoffertheproducts,services,orfeaturesdiscussedinthisdocumentinallcountries.Consult
yourlocalLenovorepresentativeforinformationontheproductsandservicescurrentlyavailableinyour
area.AnyreferencetoaLenovoproduct,program,orserviceisnotintendedtostateorimplythatonlythat
Lenovoproduct,program,orservicemaybeused.Anyfunctionallyequivalentproduct,program,orservice
thatdoesnotinfringeanyLenovointellectualpropertyrightmaybeusedinstead.However,itistheuser’s
responsibilitytoevaluateandverifytheoperationofanyotherproduct,program,orservice.
Lenovomayhavepatentsorpendingpatentapplicationscoveringsubjectmatterdescribedinthis
document.Thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents.Youcansend
licenseinquiries,inwriting,to:
Lenovo(UnitedStates),Inc.
1009ThinkPlace-BuildingOne
Morrisville,NC27560
U.S.A.
Attention:LenovoDirectorofLicensing
LENOVOPROVIDESTHISPUBLICATION“ASIS”WITHOUTWARRANTYOFANYKIND,EITHEREXPRESS
ORIMPLIED,INCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTIESOFNON-INFRINGEMENT,
MERCHANTABILITYORFITNESSFORAPARTICULARPURPOSE.Somejurisdictionsdonotallow
disclaimerofexpressorimpliedwarrantiesincertaintransactions,therefore,thisstatementmaynotapply
toyou.
Thisinformationcouldincludetechnicalinaccuraciesortypographicalerrors.Changesareperiodically
madetotheinformationherein;thesechangeswillbeincorporatedinneweditionsofthepublication.
Lenovomaymakeimprovementsand/orchangesintheproduct(s)and/ortheprogram(s)describedinthis
publicationatanytimewithoutnotice.
Theproductsdescribedinthisdocumentarenotintendedforuseinimplantationorotherlifesupport
applicationswheremalfunctionmayresultininjuryordeathtopersons.Theinformationcontainedinthis
documentdoesnotaffectorchangeLenovoproductspecicationsorwarranties.Nothinginthisdocument
shalloperateasanexpressorimpliedlicenseorindemnityundertheintellectualpropertyrightsofLenovo
orthirdparties.Allinformationcontainedinthisdocumentwasobtainedinspecicenvironmentsandis
presentedasanillustration.Theresultobtainedinotheroperatingenvironmentsmayvary.
Lenovomayuseordistributeanyoftheinformationyousupplyinanywayitbelievesappropriatewithout
incurringanyobligationtoyou.
Anyreferencesinthispublicationtonon-LenovoWebsitesareprovidedforconvenienceonlyanddonotin
anymannerserveasanendorsementofthoseWebsites.ThematerialsatthoseWebsitesarenotpartof
thematerialsforthisLenovoproduct,anduseofthoseWebsitesisatyourownrisk.
Anyperformancedatacontainedhereinwasdeterminedinacontrolledenvironment.Therefore,theresult
obtainedinotheroperatingenvironmentsmayvarysignicantly.Somemeasurementsmayhavebeen
madeondevelopment-levelsystemsandthereisnoguaranteethatthesemeasurementswillbethesame
ongenerallyavailablesystems.Furthermore,somemeasurementsmayhavebeenestimatedthrough
extrapolation.Actualresultsmayvary.Usersofthisdocumentshouldverifytheapplicabledatafortheir
specicenvironment.
©CopyrightLenovo201213

Trademarks
ThefollowingtermsaretrademarksofLenovointheUnitedStates,othercountries,orboth:
Lenovo
ThinkVantage
Microsoft,InternetExplorer,andWindowsaretrademarksoftheMicrosoftgroupofcompanies.
Othercompany,product,orservicenamesmaybetrademarksorservicemarksofothers.
14PasswordManager4DeploymentGuide

PartNumber:
Printedin
(1P)P/N:
*1P*