How to configure CSS for speed

[rokahn]

I'll soon receive an X61s w encrypted drive and XPpro. I've read on this forum that Client Security Service (CSS) is a hog. I'd appreciate suggestions on how to configure it to reduce startup time, particularly when waking from sleep mode which I do frequently. I care about security--I'll be storing patents-in-progress on this machine.

I'm not sure what the embedded security chip does. Is it worth activating or not...what are the tradeoffs?

I like the fingerprint reader on my previous X60s but would be willing to sacrifice it if disabling it would save 5+ sec/wakeup.

Are there other components of CSS I need, particularly with an encrypted drive? Is it recommended to uninstall CSS entirely?

[erik]

if you want speed then uninstall CSS entirely.   most users don't need that much security anyway.

leave the fingerprint reader.   disabling it won't save that much time, especially under XP.

[rokahn]

How to uninstall CSS while leaving fingerprint sw active?

Also, what manages the password for encrypted drive? When cold booting, will I enter a password to boot then another to log into Windows?

[erik]

you don't need CSS for the FP reader to work.   simply uninstall CSS but leave the fingerprint software.

the encrypted drive password, i believe, only gets entered once.   the encryption and password are to protect the drive from being installed in a separate system.   the encrypted drive will then be locked to your specific thinkpad.

you can set a power-on password and use the FP reader to replace this with your fingerprint.   same goes for windows logon.   you can set your power-on authentication to automatically boot into windows or set it to require a second swipe.

CSS is not required for any of this.

[spasell]

So you are saying that you can simply remove the CSS and the fingerprint software will remain in tact with no issues? If that's the case, I'm all for doing that, but I want to make sure that is 100% the case. I already set this whole thing up and do not feel like starting all over again.

[mfbernstein]

Yes, they're separate packages:
ThinkVantage Fingerprint Software 5.6 and
ThinkVantage Client Security Solution 8.0

Uninstalling the latter has no impact on the former.

[rokahn]

ClientSecuritySystem (CSS) isn't visible in either Windows AddRemovePrograms or in ThinkVantage SoftwareInstaller. I can run ClientSecuritySystem 6.0 from AllPrograms/ThinkVantage and disabled the security chip...but I can't figure out how to remove it.

Once I disable the security chip...does CSS still take many resources?

I'm running an X60s w XP

[erik]

CSS listed either under "Lenovo Client Security Solution" or "ThinkVantage Client Security Solution" in Add/Remove Programs.   you need to uninstall it completely to prevent it from using resources.   disabling the security chip (which you need for the FP reader) won't make any difference.

[rokahn]

Neither are in the uninstall list but I can run the app. Bugger! I'll just have to wait til I rebuild the system.

[ryengineer]

Neither are in the uninstall list but I can run the app. Bugger! I'll just have to wait til I rebuild the system.

Reinstall the lastest version of Thinkvantage Client Security Solution again, it would reappear in the "Add/Remove programs" in Windows XP or "Uninstall a program" in Windows Vista:

ThinkVantage Client Security Solution 8.0

[rokahn]

Good idea but not quite...

Installing on a computer with Client Security Solution 6.0
The following steps must be taken before upgrading Client Security Solution 6.0 to Client Security Solution 8.0:
1. Copy or move all files from your PrivateDisk volumes or you will lose access to your data. Client Security Solution 8.0 does not support PrivateDisk.
2. Uninstall Client Security Solution 6.0 using the Windows Control Panel.

[ryengineer]

Good idea but not quite...

ThinkVantage Client Security Solution v6.00.0027

[rokahn]

Installer errors on:

Rescue and Recovery 3.01.0037.00 is installed. To install Client Security Solution, goto Rescue and Recovery - Client Security Solution setup in Add/Remove programs...

That was the solution. CSS was part of Rescue and Recovery. I uninstalled them together through the AddRemove control panel

[rokahn]

Got a new computer w 200GB hardware-encrypted drive. How do I know the drive is operating in encrypted mode--do I have to enable something in bios? How/where do I create the password so the drive can be moved to another machine?

I want to enter just one password when booting into Windows. I've heard the drive needs a password entry only if it's reinstalled into another machine...is this true?

[jketzetera]

Got a new computer w 200GB hardware-encrypted drive. How do I know the drive is operating in encrypted mode--do I have to enable something in bios? How/where do I create the password so the drive can be moved to another machine?

I want to enter just one password when booting into Windows. I've heard the drive needs a password entry only if it's reinstalled into another machine...is this true?

Did not Lenovo include instructions on how to use the encrypted drive with your system? If you check out this thread where Hitachi's Bulk Data Encryption is discussed, Nurio posted a useful link to a Hitachi white paper where the encryption set-up is explained

http://forum.thinkpads.com/viewtopic.php?t=51983

[jketzetera]

Stupid me. The posted link is wrong .

The correct link is

http://forum.thinkpads.com/viewtopic.php?t=47004