New CSS 7 (Client Security Solution) Posted July 19, 2006

Message

Smirk · #1 Post by **Smirk** » Wed Jul 19, 2006 12:57 pm

New CSS7 now Available from Lenovo:

http://www-307.ibm.com/pc/support/site. ... selected=5

Have fun...

jjesusfreak01 · #2 Post by **jjesusfreak01** » Wed Jul 19, 2006 1:27 pm

Smirk wrote:New CSS7 now Available from Lenovo:

http://www-307.ibm.com/pc/support/site. ... selected=5

Have fun...

Thanks for the notice. I was wondering when the new version would show up.

On another note, it asks that you have the latest BIOS before installing it, a warning I would definitely heed, knowing past problems this app has had. 1.07 is currently buggy, so I think I am going to hold off on this security app until they release a stabile BIOS.

Smirk · #3 Post by **Smirk** » Wed Jul 19, 2006 3:26 pm

Bear with me, stick to CSS6. I lost a few hours this afternoon trying to work with CSS7 without success. The list of issues is too long so let me just state that, ultimitely, I was not able to assign password to Windows apps nor Web apps. It just didn't work. The interface is a little different but shouldn't be mistery. Still, I couldn't make it work so I went back to 6 with the maintenance patch.

I'll pass the fact that going from CSS6 (after uninstalling making sure I kept my existing passwords) to CSS7, I lost all. So If you have many passwords you do not want to loose. again, sctick to CSS6 which works fine for me and make sure you do export the list regularely. In addition let just hope that there will eventually be a migration path from 6 to 7 so we do not loose anything valuable data.

Regards,

PDX28 · #4 Post by **PDX28** » Wed Jul 19, 2006 11:27 pm

great, finally another release. Sounds like I'm stuck again because I can't update my BIOS for some reason. So much for that.

christopher_wolf · #5 Post by **christopher_wolf** » Thu Jul 20, 2006 12:20 am

jjesusfreak01 wrote:
On another note, it asks that you have the latest BIOS before installing it, a warning I would definitely heed, knowing past problems this app has had. 1.07 is currently buggy, so I think I am going to hold off on this security app until they release a stabile BIOS.

What is buggy with BIOS 1.07? I haven't noticed any problems thus far.

Tony's X60s · #6 Post by **Tony's X60s** » Thu Jul 20, 2006 3:20 am

It seems to work fine on an X60s with BIOS 1.06 - I think the "latest version of BIOs" requirement is IBM/Lenovo boilerplate - if there was a real specific dependency on BIOS level they usually spell it out clearly.

No sign of problems yet - but it's early days. I exported all my fingerprints data and password manager data prior to uninstall/reinstall and then reimported it and everything seems to work OK so far. I'm hoping it will fix the residual (occasional) bugs I have been experiencing, mainly in authentication on returning from suspend or locked (or both) mode.

Tony's X60s · #7 Post by **Tony's X60s** » Thu Jul 20, 2006 11:50 pm

At least for me. I lasted 28 hours after installing the new build before the "fingerprint not enrolled"/"password not configured" loop got me again.

Sigh!

jjesusfreak01 · #8 Post by **jjesusfreak01** » Thu Jul 20, 2006 11:55 pm

Specifically, alot of T60 owners have problems with 1.07 messing up standby in conjunction with Powerplay. Forgot this wasnt a device specific section.

Smirk · #9 Post by **Smirk** » Fri Jul 21, 2006 7:36 am

On my T42.

- Uninstalled CSS 6.0 (as recommended)
- Installed R&R 3.1 fresh (didn't have previous version)
- Installed CSS 7.0
- "RTM" Yes you read me. Read the Fu... Manual. (Help file in fact)

Had everything working from a password Management perspective for Windows applications and Web. The thing is that the approache to register web password is a little different from CSS 6. With 6.0 I use Cntrl + 2 to get the pop up to drag your user ID password in then save it into password manager. Dosn't work the same way with 7.0. On a new Web page authentication, you actually enter user id and password, hit enter and then you are prompted if you want to save it into password manager. The password Manager interface is also a little different so, my recommendation is to spent a little time reading the help file which will make your life easier.

As another note, I did save previous CSS 6 password list and was able to import into 7.0. Only Web apps did import but, for some reason, I was not able to use them.

I have not spent time with the R&R material. Will do over the coming weekend.

Regards,

aschb · #10 Post by **aschb** » Fri Jul 21, 2006 9:27 am

I did install the latest updates (without any uninstall) and up to now it works as before.

Nick Y · #11 Post by **Nick Y** » Fri Jul 21, 2006 12:57 pm

Smirk wrote:On a new Web page authentication, you actually enter user id and password, hit enter and then you are prompted if you want to save it into password manager.

a) Seems to work with Firefox, but I noticed that two web logins did not fire up the PM, whereas the other 12 or so did. (One being www.Tesco.com)

Also I noted:

b) Type and Transfer did not appear to work with either IE or Firefox. (Tried main security password for Firefox and dragging into the login box of www.ft.com with both IE and firefox.) (Firefox add-in installed, BTW.)

c) Most of my set up is set to convenient, but I wanted to set the PM passwords to secure. Clicked the secure buttons under PM prefs/ Adavanced and it seems to have made no difference. I even re-booted, but once I have logged in I -or perhaps anyone else -has full access to those passwords! Once I have logged into my T43 there is no further password check.

d) Short cut 'Hot Keys' do not seem to work and the box is still too small. For the Type and Transfer Tool I get a default of 'CTRL+ALT+'; the box is not quite big enough to show the full short cut. As it does not seem to operate, perhaps this is no big deal, just shows poor programming /poor QA.

e) With windows not being quite big enough, call up the Type and Transfer Tool. The window title is 'ThinkVantage Password Manager- Type-An...'

f) Back to point 'c' above. I have Firefox set to require a password to be signed in once and it is to this that I used to use CSS6 to log into, amongst other things. If I cancelled the box, firefox would not put the passwords etc. into the boxes. With CSS7 and the problem identified in 'c' above, if I cancel the Firefox security log in, by cancelling it, PM puts the passwords in place. Obviously i should be using one or the other, but others may need to be aware of this point.

At least it does start to work, which is positive with regards the previous version of CSS7 and I do not mean to be negative about it, but would like others to be aware of limitations I have seen.

(All above wrt CSS7 version i.e. 1.022)

================

EDIT: Found the answer to 'c' above: prefs only sets the default, where as for what i was doing, changing the setting afterwards, needs to be done on an individual basis. Go to PM, click the entry; go to advanced tab and set the security level to secure. Works much better now!

Also, I think with 'a' depends on the web page being secure. The log in for www.tesco.com is http not https.

================

ANOTHER EDIT: 'a' above is not dependent upon https; something else, but what? Now using PM for most passwords and Firefox password protection for the other few. Only problem is I have had to go through all my PM log-ins in order to tell Firefox that I never want to record their passwords -if you follow me.

(Still presents a problem as Firefox needs a password and PM a fingerprint. I want to set the laptop up so that my wife/ daughter can have fingerprint access without having to remember any passwords.)

Nick Y · #12 Post by **Nick Y** » Fri Jul 21, 2006 1:10 pm

One general point: I noticed that start up appears longer. It seems to be slowed up when it is displaying 'Checking the status of the embedded security chip'

(Above wrt CSS7 version i.e. 1.022)

jamess · #13 Post by **jamess** » Sun Jul 23, 2006 4:59 am

I too have finally installed CSS 7.0 for the sake of firefox plug-in, but now it takes AGES for my x60s to go into sleep mode/hibernate mode, and also start-up takes much longer... when logging on, i swipe the finger but it used to show confirmation picture, whereas now there is nothing for about 8 seconds before it shows "checking the embedded....".

I hope future updates via System Update will fix this problem...

Cheers

Nick Y · #14 Post by **Nick Y** » Sun Jul 23, 2006 5:14 am

jamess wrote:...when logging on, i swipe the finger but it used to show confirmation picture, whereas now there is nothing for about 8 seconds before it shows "checking the embedded....".

Interesting; I find it the other way around; wait for embedded check and then asked to swipe finger.

Great pity that the tick or cross confirmation is not there as it did help in terms of visual feedback. Now a blank screen tells you nothing; it may just be thinking about the fingerprint and eventually will decide that it does not like it! (The tick and cross facilities are still present, as is the picture of the finger when asked to swipe, because they are used with PM.)

BTW, I did go back to the icon-based Windows log-in and even though I logged into PM with a fingerprint, when it came to using a PM-stored password to access a website (this one, actually!) a warning came up saying that the security check had failed. I tried several websites and in the end went back to the somewhat non-descript CSS7 log-in, where 'normal' access was resumed.

Nick Y · #15 Post by **Nick Y** » Tue Jul 25, 2006 11:58 pm

Strange occurrence this morning. Powered up my laptop and I had a message to say that the embeded security chip had been deactivated and that I had to log in via Windows. Logged in and then the CSS7 installation dialog came up. I didn't want to enter all that again at this time in the morning, so I clicked cancel. After doing a few things -i.e. checking web pages, I went to All Programs/ ThinkVantage/CSS and checked the status, using the audit facility. Embedded was off, so I used the activation button, in audit, to activate again. Re-booted and all now seems OK.

Big question is, though, what deactivated the chip? I have not been near the workings of CSS for several days and haven't installed anything new. Despite on/ off use of CSS, although I did have CSS installed permanently until CSS7 came out, this has never happened before.

Tony's X60s · #16 Post by **Tony's X60s** » Wed Jul 26, 2006 1:22 am

Another bit of evidence that CSS7 is badly in need of a quality release? Fortunately, nothing as serious as that has happened to me (yet?).

What is particularly worrying, is that it doesn't sound like a "fail safe" result. If the chip is inactivated other than by an authenticated user with supervisor rights, I would have hoped there would be no way into Windows. Thinking about it now though, inactivation of the chip would simply remove the ability of CSS7 to decrypt all the credentials used by Password Manager and Secure Drive and perhaps the Fingerprint software, i.e. it would simpy look like a PC without CSS7 installed.

Nick Y · #17 Post by **Nick Y** » Sun Aug 06, 2006 3:08 am

Repeat of 'Strange occurrence this morning' posted above. Powered up my laptop and I had a message to say that the embedded security chip had been deactivated and that I had to log in via Windows.

Did an immediate shutdown (power button down for >4secs), without trying to log in, and then started up into BIOS. As far as the BIOS is concerned the security chip was enabled. Re-booted and I was back into the fingerprint log-in...

Prince · #18 Post by **Prince** » Sun Aug 06, 2006 9:48 am

I just installed CSS v.7.00.0022.00,a big mistake! too many bugs.

I had CSS 5.4 already installed, working ok but i wasn't happy with its performance, it didn't support folder encryption on other partitions or hard disks! I don't keep my files on C: where windows is installed, so I couldn't use that function. I activated the login function, booting time increased from 40 sec. to over 3 min! As I didn’t enjoy looking at my ThinkPad over 3 min. till it boots, I returned to windows standard login. Only used password manager function.
Saw the advertisement that you can create encrypted drives everywhere, decided to upgrade. Did it as they described.
1) updated the BIOS
2) uninstalled CSS 5.4
3) installed CSS v.7.00.0022.00
4) after installation asked for reboot
5) after reboot, wizard came up
6) wizard asked for a password seemed to me it meant my CSS v.5.4 admin password. and didn’t accept the old password! Neither did accept CSS v5.4 user password or BIOS admin! Looked at support website, they say new version use another way of saving password and is not compatible with 5.4 ver! I thought new version can’t read my old password.
7) in order to work around cleared the security chip.
8- after reboot, wizard came up, didn’t ask for password but finished unsuccessfully says “creating system keys” failed.
9) I thought BIOS admin password might cause the problem, disabled the Bios admin password.
10) reinstalled CSS, the same problem.
11) disabled Firewall and Antivirus. reinstalled CSS, the same problem.
12) used “cssplanarswap.exe” form step 9 to 11, I receive this error “The Clients Security Keys Could not be restored”
13) uninstalled CSS v.7.00.0022.00
14) decided to come back to CSS v5.4, it doesn’t install! Says there is a newer version already installed!
15) decided to install CSS v6
16) CSS v6 is not available for download!

Anybody here can give me a copy of CSS v6, I will be greatful.

Nick Y · #19 Post by **Nick Y** » Sun Aug 06, 2006 10:11 am

Prince:
>> 14) decided to come back to CSS v5.4, it doesn’t install! Says there is a newer version already installed!
>> 15) decided to install CSS v6
>> 16) CSS v6 is not available for download!

As you now have CSS7 installed, when trying CSS6 you may find that you have entered an endless loop

Says there is a new version already installed...
Says there is a new version already installed...
Says there is a new version already installed...

Nick Y · #20 Post by **Nick Y** » Sun Aug 06, 2006 11:22 am

Prince:

BTW, did you have the latest fingerprint and Rescue & Recovery versions installed before trying CSS7? I think that they have to be there, if I remember correctly.

Prince · #21 Post by **Prince** » Sun Aug 06, 2006 5:34 pm

Nick Y wrote:Prince:

BTW, did you have the latest fingerprint and Rescue & Recovery versions installed before trying CSS7? I think that they have to be there, if I remember correctly.

well,i don't have fingerprint reader. i got a T41-2373. about Rescue & Recovery i updated it to the latest version after step 2.

i need CSS V.6, does anybody know how big is the package?

Nick Y · #22 Post by **Nick Y** » Mon Aug 07, 2006 1:12 am

>>i need CSS V.6, does anybody know how big is the package?

I think that it is about 54MB, going from my catalogue files.

Prince · #23 Post by **Prince** » Fri Aug 11, 2006 9:22 am

it's big! can someone put CSS v.6 on say http://rapidshare.de/ and post a link here. will be thankful

Nick Y · #24 Post by **Nick Y** » Fri Aug 11, 2006 9:31 am

>> it's big! can someone put CSS v.6 on say http://rapidshare.de/ and post a link here. will be thankful Wink

That solves a problem! Give me a little while (an hour or two) as I think I have copies here on backup DVDs.

Will pm you when posted.

jjesusfreak01 · #25 Post by **jjesusfreak01** » Mon Aug 14, 2006 2:52 pm

Anyone think they could get that to me also? Thanks...

Nick Y · #26 Post by **Nick Y** » Mon Aug 14, 2006 3:01 pm

Just coming...

Uncletoad · #27 Post by **Uncletoad** » Wed Aug 23, 2006 8:12 am

Another casualty here. Anyone have css 6 they'd be willing to send me?

Nick Y · #28 Post by **Nick Y** » Wed Aug 23, 2006 8:17 am

Yes; check PM...

Prince · #29 Post by **Prince** » Sun Aug 27, 2006 1:09 pm

Nick Y wrote:Prince:
>> 14) decided to come back to CSS v5.4, it doesn’t install! Says there is a newer version already installed!
>> 15) decided to install CSS v6
>> 16) CSS v6 is not available for download!

As you now have CSS7 installed, when trying CSS6 you may find that you have entered an endless loop

Says there is a new version already installed...
Says there is a new version already installed...
Says there is a new version already installed...

Nick, you are right... i entered that loop! to go out, it is necessary to uninstall rescue and recovery. after that i could install CSS6 without that error. But I have worse news! Seems CSS7 did something to my system that now even when CSS6 tries to create keys at the end of installation process, encounters serious error! I tried to find CSS’s installation log files, I couldn’t find them, does anybody know the path or how to make CSS log? Anyway after uninstalling it is possible to install CSS5.43 without any problem and it starts to work fine like before. You can download this version from IBM support website. Now my problem is that I can’t install newer version of rescue and recovery. It says that needs CSS6 or CSS7. and I don’t have the old version’s installation file, seems they already took it out from the support site, even don’t remember what was it’s version. Anybody here knows what’s the last version of rescue and recovery that works with CSS5.43???

Uncletoad · #30 Post by **Uncletoad** » Wed Aug 30, 2006 7:51 am

Has anyone successfully got this mess working yet? I've just uninstalled and turned off the whole thing so I can work but I would like to get back to it at some point. I can't remember all my passwords and I get annoyed with looking them up.

New CSS 7 (Client Security Solution) Posted July 19, 2006

New CSS 7 (Client Security Solution) Posted July 19, 2006

Re: New CSS 7 (Client Security Solution) Posted July 19, 200

My advice, stick to CSS6

Re: New CSS 7 (Client Security Solution) Posted July 19, 200

I've taken the plunge and installed it

CSS7.00.0022 still buggy!

BIOS 1.07

Finally working !

Re: Finally working !

Doesn't build confidence, does it?

Help! Need CSS v6

Anyone have CSS 6?

CSS6 unable to install successfully

Who is online