T43 & fingerprint lock out crash

[jgrobertson]

I use Client Security 7 with fingerprint 5.6.0 software on a T43P. When I have too many trys, bad light or dry hands, it starts to lock out and then crashes with a blue screen and halt.

Any insight into this?

[GomJabbar]

The lock out is due to the anti-hammering delays built in. Not sure about the blue screen.

Incorrect attempts If you incorrectly type the UVM passphrase multiple times during a session, the computer will exercise a series of anti-hammering delays. These delays are specified in the following section.

Fail counts on systems using the National TPM The following table shows the anti-hammering delay settings for a National TPM system:

Attempts | Delay on next failure
7-13 | 4 seconds each
14-20 | 8 seconds each
21-27 | 16 seconds each
28-34 | 32 seconds each
35-41 | 64 seconds each (1.07 minutes each)
42-48 | 128 seconds each (2.13 minutes each)
49-55 | 256 seconds each (4.27 minutes each)
56-62 | 512 seconds each (8.53 minutes each)
63-69 | 1,024 seconds each (17.07 minutes each)
70-76 | 2,048 seconds each (34.13 minutes each)
77-83 | 68.26 minutes each (1.14 hours each)
84-90 |136.52 minutes each (2.28 hours each)
91-97 |273.04 minutes each (4.55 hours each)
98-104 |546.08 minutes each (9.1 hours each)
105-111 |1,092.16 minutes each (18.2 hours each)
112-118 |2,184.32 minutes each (36.4 hours each)

National TPM systems do not distinguish between user passphrases and the administrator password. Any authentication using the IBM Embedded Security Chip adheres to the same policy. There is no maximum timeout. Each failed attempt triggers the delay indicated above. The anti-hammering delays do not end at the 118th attempt; rather, they continue in the manner illustrated above indefinitely.
_____________________________________________________

Fail counts on systems using the Atmel TPM The following table shows the anti-hammering delay settings for an Atmel TPM system:

Attempts | Delay on next failure
15 | 1.1 minutes
31 | 2.2 minutes
47 | 4.4 minutes
63 | 8.8 minutes
79 | 17.6 minutes
95 | 35.2 minutes
111 | 1.2 hours
127 | 2.3 hours
143 | 4.7 hours

Atmel TPM systems do not distinguish between user passphrases and the administrator password. Any authentication using the IBM Embedded Security Chip adheres to the same policy. The maximum timeout is 4.7 hours. Atmel TPM systems will not delay for longer than 4.7 hours.

[jgrobertson]

This seams to be in the fingerprint software and not the CSS. The fingerprint is configured to lock out after 8 failed reads. When it does that, the system crashes. This is fingerprint software 5.6. The CSS is version 7 too.

I think the fingerprint software just passes the password to the CSS once it gets a match.