Active Directory Domain Server; Configuration Profile Sign And Encrypt Utility; Lenovo Profile Manager - Lenovo ThinkPad Deployment Manual

<SecurityPolicy>
<!– <SDCardEncryption>Required</SDCardEncryption> –>
<SDCardEncryption>Not required</SDCardEncryption>
<ADScreenLock>Not required</ADScreenLock>
</SecurityPolicy>
</LenovoPolicySettings>
<AndroidPolicySettings>
<storageEncryption>Not required</storageEncryption>
<Password>
<maxFailuresForWipe>10</maxFailuresForWipe>
<maxTimeToLock>5000</maxTimeToLock>
<expirationTimeout>7776000000</expirationTimeout>
<historyLength>5</historyLength>
<minLength>8</minLength>
<minLetters>2</minLetters>
<minLowercase>1</minLowercase>
<minNonLetters>1</minNonLetters>
<minNumeric>3</minNumeric>
<minSymbols>1</minSymbols>
<minUppercase>1</minUppercase>
<quality>393216</quality>
</Password>
</AndroidPolicySettings>
</lenovoconfig>
The ThinkPad Tablet XML schema can be found on the Lenovo Website at www.lenovo.com/support.

Active Directory domain server

An exclusive feature of the Lenovo ThinkPad tablet is that you can use Microsoft Active Directory to allow the
user to unlock the ThinkPad Tablet using corporate credentials. You set the XML file to require an Active
directory logon, and the user touches Settings->Location & Security->Configure lock screen->Corporate
logon. The user enters the domain name or IP address, user name, and password. After this, the user can
only use the Active Directory domain credentials to unlock the machine.

Configuration Profile Sign and Encrypt Utility

IT administrators can secure the XML configuration file by digitally signing and/or encrypting it. Encrypting
helps ensure that sensitive data included in the configuration file, such as passwords, cannot be read by
unauthorized parties. Digital signatures help ensure that the contents of the file are not tampered with.
The Configuration Profile Sign and Encrypt Utility allows signing of the configuration profile with an
embedded private key. The utility will also allow the file to be encrypted using an encryption key derived
from the password provided to the utility.
This component is intended only for the preparation of the XML configuration file for deployment to devices.
It is available at www.lenovo.com/support and click Download Drivers & Software

Lenovo Profile Manager

The Lenovo Profile Manager is an Android application (APK) that is preloaded on the ThinkPad Tablet. This
APK takes XML configuration files and has the configuration and policy settings applied, and displays
information about new and installed configuration profiles.
11
.
Chapter 2 Configuration