Choose Your Product
No Product SelectedSelect Product
Client Security Solution v6.0 - Considerations
Symptom

The Client Security Solution User Guide cannot be opened from the Help Menu because the Acrobat reader is not yet installed on the system.

Solution

Install the Adobe Acrobat reader.

Symptom

When selecting a Web page from the Password Manager Manage screen, the entries for a saved page might not automatically populate after the Web page is displayed.

Solution

Display the desired Web page. Then, press Ctrl+F2 or Shift+Ctrl+B to fill in the entries.

Symptom

If the user installs, and configures CSS 6.0, then uninstalls it, and then installs CSS 5.4x, the 5.4x install wizard will not accept the hardware password. The hardware password is not recognized because the method for storing the passwords between the two software programs is not compatible.

Solution

Turn the computer off, wait five seconds, and then restart the computer. During startup, enter the BIOS Setup utility, go to BIOS settings, and clear the security chip.

Symptom

The user creates a new email digital certificate with ThinkVantage CSP and selects the "use local machine store" checkbox. Then the user creates a PrivateDisk volume and selects the new certificate for security. PrivateDisk displays the message "An error occurred while opening the virtual disk using the certificate." A PrivateDisk is not created.

Solution

None.

Symptom

The passphrase policy states a user cannot change a password within 3 days of previously changing the password. Under certain situations, the user is able to change the password within 3 days.

Solution

The two situations where the user is allowed to change his password within 3 days are as follows:

  • The first time after the initial installation when running the Client Security Solution setup wizard.
  • If the user forgets his passphrase, it can be reset within three days, but cannot be reset again without waiting three days.
Symptom

When an administrator changes the logon settings of a system to "Enable neither of these interfaces" (or Disable CSS), he is able to select "Configure Windows XP Welcome Screen and Fast User Switching". When this is selected, the User settings screen is displayed. At this time the Logon Settings dialog also gives the user the option to reboot because a change was made. Because of the time taken to launch the user settings screen this dialog might appear after the reboot message (and after the user pressed OK).

Solution
  1. When the reboot message appears, ignore it until you are finished with the user settings screen, and then click Yes to reboot
  2. Click No to the reboot message. The user settings screen will display. Manually reboot when ready.
Symptom

A user might get the following message: "This instance of cssppchange.exe cannot start because there was an initialization error."

This error occurs because the security keys are no longer tied to the security chip. This occurs after the security chip is cleared or the system board is replaced.

Solution

Run cssplanarswap.exe from the "Client Security Solution" folder, which is usually in the Program Files folder.

Symptom

After the security chip is cleared (or after the system board is replaced), the password recovery questions are not accepted. In addition the following error is displayed: "The answers you provided to the recovery questions were not correct. Would you like to retry?"

When the system board is replaced or the security chip is cleared, the security keys must be associated to the security chip. If this is not done, the Client Security Solution application will not function properly.

Solution
  • Run cssplanarswap.exe from the "Client Security Solution" folder to associate the keys with the security chip.
  • Run the Client Security Solution setup wizard to reconfigure the computer.
Symptom

The "Set up hardware password reset" dialog refers to an "administrator password" in the BIOS. There is no administrator password. The correct terms are "user" password and "supervisor" password.

Solution

The text is incorrect; this should be "supervisor password."

Symptom

The "Use the Windows password to protect the Rescue and Recovery workspace" check box is displayed even though the Rescue and Recovery program is not installed.

After a user has installed the Client Security Solution 6.0 program only, run the setup wizard and selected "Windows Password" as the authentication method. The next screen provides the option to use the Windows password to protect the Rescue and Recovery workspace. If the Rescue and Recovery program is not installed, this check box does nothing and should not be displayed.

Solution

Ignore the option to use the Windows password to protect the Rescue and Recovery workspace.

Symptom

Client Security Solution errors occur when the security chip is disabled after the Client Security Solution program is installed.

If you set the security chip to Disabled in BIOS then it is as though you have removed the security chip from the computer. This is similar to what happens with network and audio systems when you disable them from within the BIOS; they do not appear to be installed in the computer at all.

Solution

Uninstall and reinstall the Client Security Solution.

Note: It is NOT sufficient to simply rerun the Client Security Solution setup wizard. If you do this, the application will run in emulation mode.

Symptom

When a user changes the Startup option for PrivateDisk Volume "PrivateDisk" to "Mount when volume file is accessible," a password prompt will display after every reboot. However, the password is unknown to the user because it is randomly generated by the installation.

Solution
  • Change the Startup setting to "Mount after user is logged on to the system."
  • Click Cancel. The PrivateDisk will automatically mount itself using the system generated password.
Symptom

Created backups do not appear in the Rescue and Recovery workspace when SafeGuard Easy is installed before Rescue and Recovery / Client Security Solution.

Solution

Run the winperepair.exe file from the C:\Program Files\Utimaco\SafeGuard Easy directory before entering the Rescue and Recovery workspace. The backups will be visible and the restore operation can be completed.

Symptom

Deleted files on the PrivateDisk are not restored when the user performs a restore and selects "I want to save all the files that have been created or changed since my last backup."

A PrivateDisk volume is a virtual disk which resides on the hard drive as a single file located in the current user's My Documents folder as pdisk001.vol. When the user modifies, changes, or deletes any file contained on the PrivateDisk volume, the physical file (the single pdisk001.vol file) on the hard drive changes. Therefore, when a user elects to save changed files during a restore operation, the software treats the pdisk001.vol file the same as any other changed file and does not restore it. Consequently, the files contained therein which were deleted are not recovered, because the backed up PrivateDisk file is not restored.

Solution

Complete the following procedure:

  1. Initiate a full hard disk backup operation.
  2. Create a new (temporary) PrivateDisk volume using the following procedure:
    1. Click Start, select Programs, select ThinkVantage, then click Client Security Solution.
    2. Select Protect Data. The PrivateDisk Settings dialog displays.
    3. Click New and follow the instructions on the screen to create a new PrivateDisk.
  3. Copy the files from the old PrivateDisk volume to the new, temporary PrivateDisk volume using Windows Explorer.
  4. Unmount and rename the existing PrivateDisk volume. This will enable you to restore the old PrivateDisk volume from a backup.
    1. Select SecureDrive.
    2. Click the Unmount icon at the upper part of the window.
    3. Go to the My Documents folder and rename this file securedrive.vol.
    4. Click Yes to the warning about renaming a read-only file.
  5. Restore the securedrive.vol file from a backup.
  6. Reboot the computer. Now the PrivateDisk file which will be mounted is the version from the backup.
  7. Mount the temporary PrivateDisk volume:
    1. Click Start, select Programs, select ThinkVantage, then click Client Security Solution.
    2. Select Protect Data. The PrivateDisk Settings dialog displays.
    3. Select your temporary drive.
    4. Click Mount and enter the password you specified earlier.
  8. Copy the changed files from the temporary PrivateDisk volume to the restored PrivateDisk volume.
  9. Delete the temporary PrivateDisk volume using the following procedure:
    1. Click Start, select Programs, select ThinkVantage, then click Client Security Solution.
    2. Select Protect Data. The PrivateDisk Settings dialog displays.
    3. Right-click your temporary drive and select Unmount.
    4. Right-click your temporary drive and select Remove from List. This procedure results in a new PrivateDisk volume containing the deleted files and files that had been altered.
Symptom

The name of a PrivateDisk volume that was changed using the PrivateDisk Settings dialog does not reflect the change. The PrivateDisk Settings dialog only changes the logical name for use within the PrivateDisk Settings dialog. The name of the disk file, which is the name that appears in Windows Explorer, does not change.

Solution

None.

Symptom

The user gets an error message from PrivateDisk when using a certificate to authenticate a PrivateDisk volume. This issue occurs because PrivateDisk tries to access the certificate before the security service is ready. Both PrivateDisk and the security service are started by the run key in the registry. Consequently, it is impossible to guarantee their respective start order. When the PrivateDisk volume is configured to mount automatically, it might be mounted before the security service is started. When this occurs, the certificate will not be available and PrivateDisk will display an error message.

Solution
  • Authenticate with the Client Security Solution program. This will ensure that the security service is started and initialized before the PrivateDisk volume.
  • Mount the certificate-protected PrivateDisk volume manually.
Symptom

The PrivateDisk online help indicates a PrivateDisk icon appears in the Windows Task bar. This icon does not exist.

Solution

The user can run the PrivateDisk Settings dialog using the following procedure:

  1. Click Start, select Programs, select ThinkVantage, then click Client Security Solution.
  2. Select Protect Data.
Symptom

When using the Client Security Solution logon interface, after installing the ZoneAlarm Free Edition, the following message is displayed: "It appears the system board has been replaced. Please logon to Windows normally to resolve."

The ZoneAlarm Free Edition does not allow the Client Security Solution logon interface to access the security chip. Consequently, the Client Security Solution application incorrectly concludes that the system board has been replaced.

Solution
  • When using ZoneAlarm Free Edition prior to zlsSetup_55_094_000.exe: Open the ZoneAlarm application Program control and then click the Programs tab. A list of programs and permissions are displayed. Select the Windows NT Logon Application. Reboot the computer.
  • When using ZoneAlarm Free Edition zlsSetup_55_094_000.exe: No solution is available. This ZoneAlarm version is not compatible with the Client Security Solution logon method.
Symptom

A message similar to the following is displayed: "Unable to save file C:\Windows\Downloaded Installations\{0C529225-BDD7-404A-AA0D-240B and Recovery - Client Security Solution.msi."

The Rescue and Recovery 3.0 and Client Security 6.0 application must be installed by a user with administrative privileges. When a non-administrator user tries to install Rescue and Recovery 3.0 or Client Security 6, the above message is displayed because InstallShield will try to create a cached copy of the installation source in the C:\Windows\Downloaded Installations folder before executing the Windows Installer setup package. A limited user does not have access to this folder.

Solution

Log on as a user with administrative privileges to run the Rescue and Recovery 3.0 or Client Security Solution 6.0 installation.

CMVC Defect Number: 286164

Symptom

When installing Client Security Solution 6.0, the text of the license agreement might not be displayed clearly.

Solution

Cancel the installation of Client Security Solution 6.0, restart the computer and restart the Client Security Solution 6.0 setup program.

CMVC Defect Number: 284132

Symptom

When installing Rescue and Recovery 3.0 or Client Security Solution 6.0, the install screens are very large and the dialog buttons are blank. When this occurs, the install screen will take up the entire desktop and only a portion of it is displayed.

Solution

Cancel the installation of Rescue and Recovery 3.0 or Client Security Solution 6.0, restart the computer and restart the setup program.

CMVC Defect Number: 782768

Symptom

The Rescue and Recovery 3.0 or Client Security Solution 6.0 User Guides do not list the correct Windows XP requirements.

To install Rescue and Recovery 3.0 or Client Security Solution 6.0 on Windows XP, Service Pack 1 or higher is required. This may not be listed in your copy of the product user guide.

Solution

When installing Rescue and Recovery 3.0 or Client Security Solution 6.0 on a computer using Windows XP, make sure that Service Pack 1 or higher is installed.

CMVC Defect Number: 289390

Symptom

Migration file passwords containing a space are not recognized when the file is applied to the target system.

The "Create a migration file" interface allows spaces to be included in a password; however, the entire password is not recognized. It is only recognized up until the space.

Solution

Do not use a password containing a space.

If a migration file was created that uses a password containing a space, enter only the portion of the password that precedes the space. For example, if the password is "pass word," use "pass" as the password when applying the migration file on target system.

CMVC Defect Number: 289236

Symptom

When no certificates are selected for transfer, no action is taken.

The Certificate Transfer Wizard only notifies users about certificates which were transferred between the Microsoft and the Client Security Solution certificate store. Consequently, if the user does not select any certificates to transfer, no messages are displayed.

Solution

If no messages are displayed after the user clicks Finish in the certificate transfer wizard, then no certificates were transferred.

CMVC Defect Number: 273052

Symptom

When a user uninstalls the Rescue and Recovery with Client Security Solution application, the PrivateDisk volume is not deleted. When the Client Security Solution Setup Wizard runs upon reinstallation, the PrivateDisk setup procedure attempts to unmount the existing PrivateDisk, generating the first error message: "The disk file does not exist."

A second error message is generated when the PrivateDisk application attempts to make a new volume and finds the existing file on the hard drive. A message is generated asking the user if he wants to overwrite the disk: "The file already exists. Do you want to overwrite it?"

The old PrivateDisk volume has a filename of SecureDrive.vol_"date." PrivateDisk passwords are randomly generated and are not known by the user. Therefore, old PrivateDisk volumes will never be accessible again and should be deleted.

Solution

Before uninstalling the Rescue and Recovery with Client Security Solution application, create a PrivateDisk volume manually using the PrivateDisk settings interface. Manually create a known password for this volume. This drive can then be mounted after the reinstall and the files copied to the new system-generated PrivateDisk volume.

CMVC Defect Number: 283643f_1

Symptom

The Next button is not grayed out when a user enters the secure OS to recover a lost hardware (power on) password. Thus, if the user incorrectly presses the Enter key to switch tabs before all the questions have been answered, the system thinks he wants to proceed. Without all of the correct answers, the system fails the check. After three fails, the user is booted out of the secure OS interface.

Solution

Do not press the Enter key until all three questions are completed.

CMVC Defect Number: 288680

Symptom

A comma is used in an improper location on computers using the Simplified Chinese language setting when using the Client Security Solution protect data interface.

Solution

The comma is a typographical error.

CMVC Defect Number: 286330

Symptom

Client Security Solution (CSS) version 6.01.0037 cannot be patched by CSS maintenance patch version 6.01.0042.
Client Security Solution (CSS) version 6.00.0027 can only be upgraded to version 6.01.0042 by using the version 6.01.0042 maintenance patch package.

When attempting to apply the version 6.01.0042 maintenance patch to the version 6.01.0037 code, an error message similar to the following is displayed:

Error 1328: Error applying patch to file C:\Config.Msi\PT23.tmp. It has probably been updated by other means, and can no longer be modified by this patch. For more information contact your patch vendor.

Solution

Do not attempt to upgrade version 6.01.0037 code with the version 6.01.0042 maintenance patch.

To upgrade version 6.01.0037 code to version 6.01.0042, uninstall the version 6.01.0037 code and then install the full version 6.01.0042 code.

However, to update version 6.00.0027 code to version 6.01.0042, you must use the version 6.01.0042 maintenance patch package.

CMVC Defect Number: 339404f, 335598f_1



If you are unable to find what you are looking for, please do try the following options:
1. Lenovo Assisted Search
2. Product usage and general troubleshooting tips
3. Lenovo Support Forum
4. Technical Support Call Centre

Document ID : HT036542
Legacy Document ID : MIGR-61226
Last Updated :
Copyright © Lenovo 2013, all rights reserved
Was this page helpful to you?YesNo


   
Select Task
 
Drivers & Software  
Guides & Manuals  
Diagnose & Fix  
Warranty & Services  
Parts  
Accessories  

ADDITIONAL RESOURCES
Driver Matrix
COMMUNITY
KnowledgeBase Featured Articles
Community KnowledgeBase
Community Forums
Lenovo EMC
Windows 8 Support