Enroll fingerprint to biometric device?

Is it possible to enroll fingerprint data to the biometric device? That option is shaded out for me when I start the Protector Suite QL software. I can only select "enroll to hard disk."

I did a semi-clean reinstall (SZ650), and did reinstall the PRotector Suite software as well as the Trusted Platform Module 1.2 (which shows up under Security Devices in Control Panel).

Did I forget something?

 

Not too sure, but TPM is about HW + SW.

I think you'd need to enable that in the BIOS as well. I know I did when I used that software to enrol my fingers, etc.

Well, however I decided to disable all that, as I think it's still not good...
e.g., opera browser is not supported!...

 

I have TPM enabled in the Vaio BIOS but it still doesnt allow me to save fingerprint data to the biometric device.
Were you able to save it there, or only to the HD?

 

I tried uninstall and reinstalling the FIngerprint software, no difference. Protector Suite does not allow me to store data to fingerprint device. And it also does not show me the "TPM" tab for advanced security features.

The Vaio clearly has TPM built into it, since I have ENABLEd this in the BIOS??

Is anyone able to save data to their Vaio biometric device and see a tab for "TPM" advanced security in Protector Suite / System Settings windows?

 

Mine was unselectable as well. I just didn't care I guess so I just gave it a whole 3 seconds of thought and chose the save it to hard drive option. I didn't really care one way or the other.

 

Did you do a clean or semi-clean reinstall on your Vaio? What model do you have?

I know it doesnt sound like a big deal, but it is much more secure to keep the fingerprint data on the chip rather than the hard disk. Also, no TPM advanced security features can be enabled.

I wonder if this is just a sony limitation or if some driver is missing with the semi-clean reinstall process.

 

Yea I did the semi clean install.

 

The software for the TPM device doesn't automatically install with the semi-clean process. The sony security center just happened to pop up to offer a trial of lojack and I noticed you can install the TPM software. If you manually open up the security center, you can activate the software. At this point, you will be able to go back and enroll your prints to the chip.

 

i found the program:

if you go to your c drive there is a folder called infineon

run the setup program in there to install the TPM software

i dont know if the semi-clean installs that folder

you can get this software from the sony driver download page:
http://esupport.sony.com/US/perl/swu-download.pl?mdl=VGNSZ680&upd_id=2878&os_id=29

 

NG12345- The C:\Infineon is for the TPM PRO software, which installs 200MB of security stuff. But even after this install, I could not A. enroll prints to the chip B. use the TPM tab in Protector Suite (just a button to re-initiatilize which did not help).


CRJSTEPH- i installed both Protector Suite and TPM thru control panel but still cannot enroll to chip. What is the "sony security center"? I did not install this. Maybe this is the problem?

 

the sony security center is basically a bunch of ads compiled into a program.

maybe one of those programs activated it, but the only thing I saw were 5 links to different trial softwares and discounts on buying full versions of norton antivirus, lojack and some other stuff

Ya after installing the infineon stuff it didn't let me save the print to chip (I wasn't given an option, whereas the first time I was given 2 options with one greyed out) -- > however, now after any swipe to login or store a password, there is a dialog box that shows up saying something about cryptography being used on the TPM chip (sorry don't have the exact wording)

in essence, protector suite QL is now giving the semblance of using the TPM chip --> whether it is or isn't, I don't know

Also, the TPM is disabled in the bios by default, the infineon software automatically enables and allows you to initializes it

 

On my TZ the enrollment to the device for fingerprints happens when you use the reader to replace the Bios password.

First you have to set a Bios password on startup. Then using the QL Protector Suite you can register your fingerprints for boot in addition to windows password. This means that the fingerprint reader asks for your fingerprint instead of the Bios password before loading the OS. In order to do this it uses the boot registered prints on the device.

There is a final option to allow fingerprint pass-thru which is enabled in the Protector Suite software which means that if you use a fingerprint at boot up before loading the OS the same print is used to logon to Windows without you having to swipe a second time.

 

**

I have done this. After setting up BIOS password, at the step where QL Protector Suite asks to register fingerprint, the option to save to device is still grayed out. Upon bootup, you still get the prompt to swipe fingerprint, but I believe it is using fingerprint data stored on the HD since that is how you were forced to enroll?

 

So how is it reading the prints from the HD if the OS hasn't loaded? I will double check on my TZ again what the documentation says.

 

I assume that the BIOS is accessing the fingerprint data stored on the hard disk?

Even if the BIOS screen is accessing the fingerprint data on the chip, Protector Suite is still saving a file to the hard disk since you were forced to register this way. And having the file on the HD defeats the purpose of having it secure on the chip

 

did you ever get this to work as you wanted it to?

 

on my old toshiba m100 (vista without tpm), i can enroll my fingerprint to the biometric device.

i don't think the option has anything to do with tpm. rather, it is the biometric device hardware itself. some model support it, some don't. the protector suite shaded the checkbox for those which doesn't.

edit: i stand corrected. seems someone managed to save fingerprints to the hardware instead of disk.

http://forum.notebookreview.com/showthread.php?t=176675