Manual

2.Overinstallallthreedifferentversionsofoldersoftware(RescueandRecovery1.0/2.0/3.0,Fingerprint,
ClientSecuritySolution5.4–6,FFE).Settingsshouldbekeptwheninstallingthenewversionover
theoldversion.
SystemMigrationAssistant
MigratefromT40withClientSecuritySolution7.0toaT60withClientSecuritySolution8.21.
GeneratingacerticateusingkeygenerationintheTPM
CerticatescanbegenerateddirectlybyusingClientSecurityCSP ,andtheprivatekeysinthecerticates
aregeneratedandprotectedbytheTPM.TorequestacerticateusingClientSecuritySolutionCSP ,
completethefollowingsteps:
Requirements:
•Theservermachineshouldhavethefollowinginstalled:
–Windows2003Enterpriseorabove
–ActiveDirectory
–CerticateAuthorityservice
•Theclientmachineshouldmeetthefollowingrequirements
–TPMenabled
–ClientSecuritySolutioninstalled
RequestingcerticatefromtheServer
CreatingtemplateforTPMuser
TocreatetemplateforTMPuser,completethefollowingprocedureasbelow:
1.ClickStart➙Run.
2.TypemmcandclickOK.Theconsolewindowdisplays.
3.FromtheFilemenu,clickAdd/RemoveSnap-in,andthenclickAdd.TheAddStandalonesnap-in
windowdisplays
4.Double-clickCerticationAuthorityinthesnap-inlist,andclickClose.
5.ClickOKintheAdd/RemoveSnap-inwindow.
6.ClickCerticateT emplatesfromtheconsoletree.Allofthecerticatetemplatesaredisplayed
intheleftpane.
7.ClickAction➙DuplicateTemplate.
8.IntheDisplayNameeld,typeTPMUser.
9.ClicktheRequestHandlingtab,andclickCSPs.MakesuretoselectRequestscanuseanyCSP
availableonthesubject'scomputers.
10.ClicktheGeneraltab.MakesurethatPublishCerticateinActiveDirectoryisselected.
11.ClicktheSecuritytab,intheGrouporusernameslist,clickAuthenticatedUsersandmakesure
EnrollisselectedinthePermissionsforAuthenticatedUsers.
Conguringanenterprisecerticationauthority
ToissuetheTPMUsercerticatebyconguringanenterprisecerticationauthority,completethefollowing
procedureasbelow:
60ClientSecuritySolution8.21DeploymentGuide