HP dc73 Blade Client Troubleshooting, Credential Manager for ProtectTools, Virtual Token during

7 Troubleshooting

Credential Manager for ProtectTools

Short description Details Solution

Using Credential Manager Network Accounts option, a user can select which domain account to log into. When TPM authentication is used, this option is not available. All other authentication methods work properly.

Using TPM authentication, the user is only logged into the local computer.

Using Credential Manager Single Sign On tools allows user to authenticate other accounts.

USB token credential is not available with login to Windows XP Service Pack 1.

After installing USB token software, registering the USB token credential, and setting Credential Manager as primary login, the USB Token is neither listed nor available in the Credential Manager/gina logon.

When logging back into Windows, log off Credential Manager, re-log back into Credential Manager and reselect token as primary login, the token login operation functions normally.

This only occurs with Windows XP Service Pack 1; update Windows version to Service Pack 2 via Windows Update to correct.

To work around if retaining Service Pack 1, re-log back into Windows using another credential (Windows password) in order to log off and re-log back into Credential Manager.

Some application Web	Some Web-based applications stop
pages create errors that	functioning and report errors due to the
prevent user from	disabling functionality pattern of Single
performing or completing	Sign On. For example, an ! in a yellow
tasks.	triangle is observed in Internet Explorer
	indicating an error has occurred.

Credential Manager Single Sign On does not support all software Web interfaces. Disable Single Sign On support for the specific Web page by turning off Single Sign On support. Please see complete documentation on Single Sign On, which is available in the Credential Manager help files.

If a specific Single Sign On cannot be disabled for a given application, call HP Service and Support and request 3rd level support through your HP Service contact.

No option to Browse for	User cannot move the location of	The browse option was removed from current product
Virtual Token during the	registered virtual token in Credential	offerings because it allowed non-users to delete and
login process.	Manager because the option to browse	rename files and take control of Windows.
	was removed due to security risks.
Login with TPM	Using the Network Accounts option, a	HP is researching a workaround for future product
authentication does not	user can select which domain account to	enhancements.
give the Network	log into. When TPM authentication is
Accounts option.	used, this option is not available.
Domain administrators	This happens after a domain	Credential Manager cannot change a domain user's
cannot change Windows	administrator logs on to a domain and	account password through Change Windows
password even with	registers the domain identity with	password. Credential Manager can only change the
authorization.	Credential Manager using an account	local PC account passwords. The domain user can
	with Administrator's rights on the domain	change his/her password through Windows
	and the local PC. When the domain	security > Change password option, but, since the
	administrator attempts to change the	domain user does not have a physical account on the

56 Chapter 7 Troubleshooting ENWW