Lenovo Secure Managed Client (English) Secure Managed Client Deployment Guide
Lenovo Secure Managed Client Manual
View all Lenovo Secure Managed Client manuals
Add to My Manuals
Save this manual to your list of manuals |
Lenovo Secure Managed Client manual content summary:
- Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 1
Secure Managed Client Version 2.0 Deployment Guide Date: February 26, 2010 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 2
- Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 3
Secure Managed Client Version 2.0 Deployment Guide Date: February 26, 2010 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 4
First Edition (February 2010) © Copyright Lenovo 2009, 20010. LENOVO products, data, computer software, and services have been developed exclusively at private expense and are sold to governmental entities as commercial items as defined by 48 C.F.R. 2.101 with limited and restricted - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 5
for Secure Managed Client. Secure Managed Client is developed for IT professionals and the unique challenges they encounter. This deployment guide will provide instructions and solutions for working with Secure Managed Client. If you have suggestions or comments, communicate with your Lenovo - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 6
iv Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 7
51 Creating asynchronous replication 52 Manual failover 52 Chapter 10. Troubleshooting . . . . . 53 Problems 53 Storage array diagnostics 53 Secure Managed Client will not boot . . . . . 53 Clients will not boot after moving the Management Console 53 Management Core Server IP address has - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 8
vi Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 9
components: v Secure Managed Clients: The clients consist of Lenovo diskless ThinkCentre M-series desktop computers using Intel vPro® technology. The clients are configured to boot directly from the Secure Managed Client Storage Array. v Storage Array: The Secure Managed Client Storage Array is the - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 10
2 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 11
Secure Managed Client Console" on page 13 __ 4. "Starting LANDesk Management Suite" on page 15 __ 5. "Creating a standard base image" on page 16 __ 6. Chapter 7, "Populating a base image," on page 41 __ 7. "Creating a standard image or single image user image" on page 16 Provisioning the storage - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 12
"Pristine image" on page 21 v Fast boot, good performance v User's changes stored separately on storage array v Supports pristine image __ 2. Creating Users __ 3. Deploying images "Deploying the image directly to the storage array" on page 45 4 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 13
requirements The following are preferred network requirements: v Multi GB backbone v The Secure Managed Client Storage Array has 6 1-GB ports combined v The switches are placed between the storage array and client only The following are alternate networking requirements: v A 1 GB or faster backbone - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 14
is an overview of the Secure Managed Client boot sequence: v The physical hardware is connected to the storage array and LANDesk Management Suite (LDMS). There is no local disk storage. The boot manager boots from a common boot image over iSCSI using the iSCSI services built into the physical NIC - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 15
service as mapping to a file or device. In the case of Secure Managed Client, the iSCSI service runs in the storage array and the target (or tag) is generated by a combination of the storage array 100 Mb line is able to support a single user but as multiple clients added, the capacity of the 100 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 16
Client solution would consist of: v A central switch with the 6 1 GB links aggregated to the storage array v 4 to 5 satellite switches, each with 1 GB links to the central switch v 0 to 25 clients per satellite switch with 1 GB or 100 Mb links 8 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 17
are the following topics: v "Prerequisites" v "Secure Managed Client manual setup" on page 10 v "Secure Managed Client - Storage Array setup" on page 11 v "Secure Managed Client management core installation" on page 12 v "Secure Managed Client Storage Array provisioning" on page 12 Prerequisites - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 18
storage array is 150. 5. Performance of the Secure Managed Client solution is impacted by the number of active users. Secure Managed Client manual setup 1. Flash the BIOS on the machine with the latest Secure Managed Client Lenovo splash screen. 10 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 19
NOCRED=1 v NODISKSTAT When set to 1, does not install the Disk Performance Monitor: SMCSetup.exe /v NODISKSTAT=1 Secure Managed Client - Storage Array setup The Product Recovery CD for Secure Managed Client should be preloaded. If not, use an approved universal serial bus (USB) CD-ROM for installing - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 20
5, "LANDesk Information," on page 13. Secure Managed Client Storage Array provisioning The storage array is provisioned through the LANDesk Secure Managed Client software. See Chapter 5, "LANDesk Information," on page 13 for more information. 12 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 21
Management Suite, see the LANDesk Management Suite User's Guide at the following Web address: http://www.landesk.com/supportdownload/resourcelibrary.aspx Secure Managed Client / LANDesk setup To obtain this product, please see your Lenovo &displaylang=en For Web Services Enhancements 2.0 SP3, do - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 22
Extensions. 3. Right click ASP.NET v2.x.x in the Web Service Extension list in the right panel and click Allow. Secure Managed Client server See the LANDesk Management Suite System Requirements and Platform Support Web site for the latest requirements: http://www.landesk.com/SolutionServices/product - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 23
Configuring the LANDesk Secure Managed Client console The Secure Managed Client console allows you to perform critical network management functions from one convenient location. There is no need to go to any of the managed devices to perform routine maintenance or to troubleshoot problems. From the - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 24
Provisioning is the process where you configure the storage array to work with the Secure Managed Client console. To provision the storage array, do the following: 1. Click SMC Manager in the Toolbox panel on the left. If the toolbox is not shown, click View on the taskbar and then click Toolbox - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 25
that user on the Users branch of the storage array entry in the Secure Managed Client Manager window. 3. In the Create new user support You must request a new license to start using these features: 1. Request a new license. To do this: a. From the SMC Manager screen, right click on the storage array - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 26
base image. This image type provides space saving advantages because the common data for each user is not duplicated on the storage array. This common data storage also provides some measure of increased performance at SMC client boot time. 18 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 27
"Creating a standard base image" on page 16. Local cache image Secure Managed Client allows you to configure some workstations to use a local copy of a user's base image rather than the user's base image on the storage array. This method allows for faster boot times and a greater working distance - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 28
SMC client that you want to configure for assigned seating to the Assigned seating branch of the storage array. 6. Under Assigned images, drag the assigned image that you just created to the appropriate SMC client listed under Assigned seating. 20 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 29
answers in this case, the test will revert to it's original form after a reboot. To mark an image as pristine: 1. Shut down the client system 2. Right-click on the image description and select Take Pristine Snapshot 3. When the Create Pristine Snapshot window opens, click Yes 4. The user account - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 30
22 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 31
problems with the client images. For best results, configure the BIOS settings in the client machine before setting up your XP or Vista base image. This will avoid any AHCI compatability issues. See "Secure Managed Client manual OemPreinstall entry is set to Yes. © Copyright Lenovo 2009, 20010 23 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 32
system boots, the system can be migrated. If you are using a Lenovo Secure Managed Client PE CD to clone your existing image to Secure Managed Client, simply follow the CD instructions. To avoid any problems if you are using your own tool to clone the system, and you are running SP3, run regedit - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 33
Note: Lenovo does not provide instructions for storage array and will be run on the Lenovo Common Virtualization Platform (LCVP), more steps are needed to make sure the restored image works as designed. Two major scenarios are as follows: Preparing a new Windows Vista image for Secure Managed Client - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 34
Preparing a Windows Vista preload on a Lenovo M57 with service partition but no separate active system partition for Secure Managed Client 1. Install the Lenovo OEM Vista (either from install CD or from preload) on your master system. 2. Log in as Administrator. 3. Delete the extra user accounts - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 35
drive letter is F. Save it to your .wim file. Imagex /capture F: D:\myimg\ServicePartition.wim "Service Partition" Now you have the .wim files. These .wim files have everything but the Lenovo Secure Managed Client VNIF drivers. Depending on your system and network speed, it usually takes 20 to 50 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 36
the service partition. Both Windows Vista and the Service Partition should have Lenovo VNIF drivers installed. Preparing regular Windows Vista for Secure Managed Client 1. Install Windows Vista on your master system. 2. Log in as Administrator. 28 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 37
Secure Managed Client VNIF drivers. 5. Run cmd (run as administrator) and change the directory to C:\windows\System32\Sysprep. 6. Copy the provided UNATTENDNONOEM.XML to the current directory and rename it to UNATTEND.XML. Note: Lenovo network drive to your central storage server, assuming that the - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 38
drivers and applications as needed. Now your system should have everything you need except Lenovo Secure Managed Client VNIF drivers 5. Run the cmd.exe file (Run as administrator) and then change the directory to C:\windows\System32\sysprep. 30 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 39
a network drive to your central storage server. Issue Net use * \\ Lenovo Secure Managed Client VNIF drivers. Depending on your system and network speed, it usually takes between 20 and 50 minutes to capture the images. 15. Inject VNIF drivers to your wim files for both Vista system and Service - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 40
The SMCSetup.exe file will not install the VNIF drivers to your Service Partition. If you need network access from your Service Partition after deployment, you must inject the drivers by performing the files are ready to be restored on your LUN. 32 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 41
the storage array and mount Lenovo) is D. BCDFix /system:s /os:c /data:d Notes: a. The system will reboot at the end of script. b. In order to make the preload work properly, you need run both step 20 and step 23 when using Ghost or another sector-based imaging tool. Chapter 6. Secure Managed Client - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 42
Managed Client, try to clone your existing system to Secure Managed Client. If you are using a Lenovo Secure Managed Client PE CD to clone your existing image to Secure Managed Client, follow the CD instructions. If you are using your own tool to clone the system, you may need to fix a few problems - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 43
run boxes. The Services window opens. 2. Double-click on Superfetch in the list. The SuperFetch properties. 3. change the drop-down to Disabled. You can also click Stop to immediately turn it off. 4. Click OK Bridge Connections To prevent non-Secure Managed Client clients from acquiring IP addresses - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 44
drive and requires that they be read from the user's copy on the storage array, thus reducing the benefits of local cache. Running an active defragmentation program is undesirable in the Secure Managed Client environment. Since the logical disk is spread across multiple physical disks, it becomes - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 45
All nonessential services have the startup type manual or disabled. Typical nonessential services include the following: v Windows search v Windows update v Third-party update services v Operating system services that are not used in daily functions Chapter 6. Secure Managed Client image creation - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 46
polling of Microsoft servers for updates Windows search Supports indexing of system files for faster searches Windows error reporting Sends WER reports to Microsoft ThinkVantage® Technologies Because of the way Secure Managed Client is designed, the following ThinkVantage Technologies are less - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 47
services before you disable them. v SERVICES - Volume Shadow Service - Windows Update - Windows Search - SuperFetch - ReadyBoost - Tablet PC Service to configure a portion of your storage array as network attached storage, see Chapter 8, "Setting up Secure Managed Client image creation and tuning 39 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 48
be set up before marking an image as pristine. Any files saved to a network share will not be deleted when a pristine image is rebooted. 40 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 49
blank space. Although this is valid, it does not utilize the full power of the Secure Managed Client solution. This section discusses the main methods to deploy or install the base image onto the storage array for future creation of new users. Using bootable CD/DVD media This method is used to - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 50
location on the Secure Managed Client Storage Array. The iSCSI initiator Management to check that the disk is erased completely. a. diskpart - this will open a > prompt. b. list disk - scan all disks listed for the appropriate disk to prepare. 42 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 51
. To allow for these multiple partitions to be copied from the local hard disk of a Secure Managed Client client to the storage array, do the following: 1. Create the base image on the storage array using the Secure Managed Client Management Console. That image will be in Pending state. 2. Start the - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 52
multiple partitions to be copied from the local hard disk of a Secure Managed Client client to the storage array for Version 2.0, do the following: 1. Create the base image on the storage array using the Secure Managed Client Management Console. That image will be in Pending state. 2. Start the - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 53
in Step 9 or the target drive might not be bootable. Deploying the image directly to the storage array Using this method, you connect directly to the base image on the storage array without using the client. Use this method only if there is an image file available for installation to a hard disk - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 54
images uploaded to the storage array, follow the instructions to create a new user in the LANDesk console. Boot acceleration Using boot acceleration, the storage array has the capability to pressing Enter (the Confirmation window states this). 46 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 55
The SMCWinPE.iso CD is not meant to copy service partition data to the storage array. Instead, the SMCWinPE.iso copies data to a normal bootable drive, usually the C drive. If not using a Lenovo CD Any bootable CD/DVD media can be used to boot a client. USB media, including USB keys or USB hard disk - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 56
48 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 57
storage array can be configured as a Network Attached Storage (NAS) device. To configure, do the following: 1. Configure Active Directory®: a. Make sure that Active Directory has been configured in the Directory Manager. See "Secure Managed Client 3. Click Create. © Copyright Lenovo 2009, 20010 49 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 58
50 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 59
promote the secondary storage array to become the primary in the case of a problem. It also storage arrays must have synchronous replication licenses installed. v The secondary storage array must have storage equal to or greater than the primary storage array. See Chapter 4, "Secure Managed Client - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 60
will be displayed showing the overall replication progress as well as the progress of each image. If the secondary array is promoted before replication is complete, some images may not be available on the secondary array once it is promoted. 52 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 61
Secure Managed Client. See the Secure Managed Client - Storage Array User Guide for additional troubleshooting information. Problems This section contains various problems See "Secure Managed Client manual setup" on page 10 for more information. If the BIOS cannot connect to the storage array and - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 62
successfully and produces a user entry in the users branch of the storage array but no image is created for that user, there is a lack space on the storage array for that image. LANDesk logs When troubleshooting Secure Managed Client problems, there are two LANDesk logs and two Web sites that you - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 63
clients on storage array affected System attached to cable affected All clients report a time-out dialog All systems on subnet are affected All systems using DNS Server Multiple users report Web issues Binding order in the Secure Managed Client and Bindings tab. Chapter 10. Troubleshooting 55 - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 64
support Web site for more information about downloading this utility. v The SMCWinPE CD is only meant to copy service partition data to the normal bootable drive. v Using the SMC WinPE CD, the Lenovo Service Partition is not copied to the user's image on the storage array. The Secure Managed Client - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 65
. Boot the systems for the first time in groups of 30 or less. v When using the Secure Managed Client WinPE CD to copy the local hard disk drive partition to the storage array, the user must unplug the physical drive before rebooting. Unplug the local physical hard drive before booting to the user - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 66
58 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 67
and verify the operation of any other product, program, or service. Lenovo may have patents or pending patent applications covering subject matter described document are not intended for use in implantation or other life support applications where malfunction may result in injury or death to - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 68
The following terms are trademarks of Lenovo in the United States, other countries, or both: Lenovo Lenovo logo ThinkCentre Intel and Intel , or both. Other company, product, or service names may be trademarks or service marks of others. 60 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 69
Managed Client client's data is securely stored. All configurations have 12 disk and 6 x 1GB Ethernet ports. The Storage Array is managed and provisioned remotely through the SMC Management Console. ULOS. The Secure Managed Client User Logon Screen VNIF. Virtual Network Interface © Copyright Lenovo - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 70
62 Secure Managed Client Version 2.0 Deployment Guide - Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 71
- Lenovo Secure Managed Client | (English) Secure Managed Client Deployment Guide - Page 72
Printed in USA
Secure Managed Client Version 2.0
Deployment Guide
Date: February 26, 2010