Compaq dc7800 Protect Tools User Guide - Page 62
Troubleshooting, Credential Manager for ProtectTools
View all Compaq dc7800 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 62 highlights
7 Troubleshooting Credential Manager for ProtectTools Short description Details Solution Using Credential Manager Network Accounts option, a user can select which domain account to log into. When TPM authentication is used, this option is not available. All other authentication methods work properly. Using TPM authentication, the user is only logged into the local computer. Using Credential Manager Single Sign On tools allows user to authenticate other accounts. USB token credential is not available with login to Windows XP Service Pack 1. After installing USB token software, registering the USB token credential, and setting Credential Manager as primary login, the USB Token is neither listed nor available in the Credential Manager/gina logon. When logging back into Windows, log off Credential Manager, re-log back into Credential Manager and reselect token as primary login, the token login operation functions normally. This only occurs with Windows XP Service Pack 1; update Windows version to Service Pack 2 via Windows Update to correct. To work around if retaining Service Pack 1, re-log back into Windows using another credential (Windows password) in order to log off and re-log back into Credential Manager. Some application Web pages create errors that prevent user from performing or completing tasks. Some Web-based applications stop functioning and report errors due to the disabling functionality pattern of Single Sign On. For example, an ! in a yellow triangle is observed in Internet Explorer indicating an error has occurred. Credential Manager Single Sign On does not support all software Web interfaces. Disable Single Sign On support for the specific Web page by turning off Single Sign On support. Please see complete documentation on Single Sign On, which is available in the Credential Manager help files. If a specific Single Sign On cannot be disabled for a given application, call HP Service and Support and request 3rd level support through your HP Service contact. No option to Browse for Virtual Token during the login process. User cannot move the location of registered virtual token in Credential Manager because the option to browse was removed due to security risks. The browse option was removed from current product offerings because it allowed non-users to delete and rename files and take control of Windows. Login with TPM authentication does not give the Network Accounts option. Using the Network Accounts option, a user can select which domain account to log into. When TPM authentication is used, this option is not available. HP is researching a workaround for future product enhancements. Domain administrators cannot change Windows password even with authorization. This happens after a domain administrator logs on to a domain and registers the domain identity with Credential Manager using an account with Administrator's rights on the domain and the local PC. When the domain administrator attempts to change the Credential Manager cannot change a domain user's account password through Change Windows password. Credential Manager can only change the local PC account passwords. The domain user can change his/her password through Windows security > Change password option, but, since the domain user does not have a physical account on the 56 Chapter 7 Troubleshooting ENWW