Troubleshooting; Credential Manager For Protecttools - HP dc5750 - Microtower PC User Manual

7

Troubleshooting

Credential Manager for ProtectTools

Short description
Using Credential Manager
Network Accounts option,
a user can select which
domain account to log
into. When TPM
authentication is used, this
option is not available. All
other authentication
methods work properly.
USB token credential is
not available with login to
Windows XP Service Pack
1.
Some application Web
pages create errors that
prevent user from
performing or completing
tasks.
No option to Browse for
Virtual Token during the
login process.
Login with TPM
authentication does not
give the Network
Accounts option.
Domain administrators
cannot change Windows
password even with
authorization.
56 Chapter 7 Troubleshooting
Details
Using TPM authentication, the user is
only logged into the local computer.
After installing USB token software,
registering the USB token credential, and
setting Credential Manager as primary
login, the USB Token is neither listed nor
available in the Credential Manager/gina
logon.
When logging back into Windows, log off
Credential Manager, re-log back into
Credential Manager and reselect token
as primary login, the token login
operation functions normally.
Some Web-based applications stop
functioning and report errors due to the
disabling functionality pattern of Single
Sign On. For example, an ! in a yellow
triangle is observed in Internet Explorer
indicating an error has occurred.
User cannot move the location of
registered virtual token in Credential
Manager because the option to browse
was removed due to security risks.
Using the Network Accounts option, a
user can select which domain account to
log into. When TPM authentication is
used, this option is not available.
This happens after a domain
administrator logs on to a domain and
registers the domain identity with
Credential Manager using an account
with Administrator's rights on the domain
and the local PC. When the domain
administrator attempts to change the
Solution
Using Credential Manager Single Sign On tools allows
user to authenticate other accounts.
This only occurs with Windows XP Service Pack 1;
update Windows version to Service Pack 2 via
Windows Update to correct.
To work around if retaining Service Pack 1, re-log back
into Windows using another credential (Windows
password) in order to log off and re-log back into
Credential Manager.
Credential Manager Single Sign On does not support
all software Web interfaces. Disable Single Sign On
support for the specific Web page by turning off Single
Sign On support. Please see complete documentation
on Single Sign On, which is available in the Credential
Manager help files.
If a specific Single Sign On cannot be disabled for a
given application, call HP Service and Support and
request 3rd level support through your HP Service
contact.
The browse option was removed from current product
offerings because it allowed non-users to delete and
rename files and take control of Windows.
HP is researching a workaround for future product
enhancements.
Credential Manager cannot change a domain user's
account password through Change Windows
password. Credential Manager can only change the
local PC account passwords. The domain user can
change his/her password through Windows
security > Change password option, but, since the
domain user does not have a physical account on the
ENWW