HP Dc5700 HP ProtectTools Security Manager Guide - Page 29

Troubleshooting, Credential Manager for ProtectTools

Page 29 highlights

8 Troubleshooting Credential Manager for ProtectTools Short description Details Solution Using Credential Manager Network Accounts option, a user can select which domain account to log into. When TPM authentication is used, this option is not available. All other authentication methods work properly. Using TPM authentication, the user is only logged into the local computer. Using Credential Manager Single Sign On tools allows user to authenticate other accounts. USB token credential is not available with login to Windows XP Service Pack 1. After installing USB token software, registering the USB token credential, and setting Credential Manager as primary login, the USB Token is neither listed nor available in the Credential Manager/gina logon. When logging back into Windows, log off Credential Manager, re-log back into Credential Manager and reselect token as primary login, the token login operation functions normally. This only occurs with Windows XP Service Pack 1; update Windows version to Service Pack 2 via Windows Update to correct. To work around if retaining Service Pack 1, re-log back into Windows using another credential (Windows password) in order to log off and re-log back into Credential Manager. Some application Web pages create errors that prevent user from performing or completing tasks. Some Web-based applications stop functioning and report errors due to the disabling functionality pattern of Single Sign On. For example, an ! in a yellow triangle is observed in Internet Explorer indicating an error has occurred. Credential Manager Single Sign On does not support all software Web interfaces. Disable Single Sign On support for the specific Web page by turning off Single Sign On support. Please see complete documentation on Single Sign On, which is available in the Credential Manager help files. If a specific Single Sign On cannot be disabled for a given application, call HP Service and Support and request 3rd level support through your HP Service contact. No option to Browse for Virtual Token during the login process. User cannot move the location of registered virtual token in Credential Manager because the option to browse was removed due to security risks. The browse option was removed from current product offerings because it allowed non-users to delete and rename files and take control of Windows. Login with TPM authentication does not give the Network Accounts option. Using the Network Accounts option, a user can select which domain account to log into. When TPM authentication is used, this option is not available. HP is researching a workaround for future product enhancements. ENWW Credential Manager for ProtectTools 23

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48

8
Troubleshooting
Credential Manager for ProtectTools
Short description
Details
Solution
Using Credential Manager
Network Accounts option,
a user can select which
domain account to log
into. When TPM
authentication is used, this
option is not available. All
other authentication
methods work properly.
Using TPM authentication, the user is
only logged into the local computer.
Using Credential Manager Single Sign On tools allows
user to authenticate other accounts.
USB token credential is
not available with login to
Windows XP Service Pack
1.
After installing USB token software,
registering the USB token credential, and
setting Credential Manager as primary
login, the USB Token is neither listed nor
available in the Credential Manager/gina
logon.
When logging back into Windows, log off
Credential Manager, re-log back into
Credential Manager and reselect token
as primary login, the token login
operation functions normally.
This only occurs with Windows XP Service Pack 1;
update Windows version to Service Pack 2 via
Windows Update to correct.
To work around if retaining Service Pack 1, re-log back
into Windows using another credential (Windows
password) in order to log off and re-log back into
Credential Manager.
Some application Web
pages create errors that
prevent user from
performing or completing
tasks.
Some Web-based applications stop
functioning and report errors due to the
disabling functionality pattern of Single
Sign On. For example, an
!
in a yellow
triangle is observed in Internet Explorer
indicating an error has occurred.
Credential Manager Single Sign On does not support
all software Web interfaces. Disable Single Sign On
support for the specific Web page by turning off Single
Sign On support. Please see complete documentation
on Single Sign On, which is available in the Credential
Manager help files.
If a specific Single Sign On cannot be disabled for a
given application, call HP Service and Support and
request 3rd level support through your HP Service
contact.
No option to
Browse for
Virtual Token
during the
login process.
User cannot move the location of
registered virtual token in Credential
Manager because the option to browse
was removed due to security risks.
The browse option was removed from current product
offerings because it allowed non-users to delete and
rename files and take control of Windows.
Login with TPM
authentication does not
give the
Network
Accounts
option.
Using the
Network Accounts
option, a
user can select which domain account to
log into. When TPM authentication is
used, this option is not available.
HP is researching a workaround for future product
enhancements.
ENWW
Credential Manager for ProtectTools
23