Check Point HARMONY R81 - Password Synchronization

Password Synchronization
R81 Harmony Endpoint Server Administration Guide|233
Password Synchronization
Pre-boot is a program that prevents the operating system from booting until the user
authenticates. You can synchronize the Pre-boot and operating system passwords.
Notes and Recommendations:
n
Password Synchronization only works if Pre-boot authentication is enabled.
n
If you plan to use OneCheck Logon, we recommend that you keep the OS and Pre-boot
passwords synchronized. This makes sure that both passwords are the same, and users
can use each one, if necessary.
n
If you use password synchronization, we recommend that users' Windows password and
Pre-boot password have the same requirements. This prevents problems with the first
Pre-boot logon, OneCheck Logon, and Single Sign-On.
n
If the OneCheck User Settings policy is set to synchronize Pre-boot and Windows
passwords, and a user changes his or her password, the change is automatically sent to
all computers the user is authorized to access in Pre-boot.
The password change is communicated to relevant clients as part of the regular
heartbeat and sync messages between clients and servers. If a computer is not
connected to an Endpoint Security Server when the password is changed, the change is
sent to the computer after it connects to an Endpoint Security Server.
In this situation, users might have to log in to Pre-boot one time with their old passwords
before the client can connect to the server and get the updated credentials.
Select an Action to define if and how the passwords are synchronized:
Action Description
Update Pre-boot password Upon
Windows Password Change
When the OS password on a computer changes,
the Pre-boot password is automatically changed.
Update Windows Password Upon
Pre-boot Password Change
When the Pre-boot password on a computer
changes, the OS password is automatically
changed.
Bi-directional Update for Pre-boot
and Windows Password Upon
Change
If the Pre-boot or OS password on a computer
changes, the password is automatically changed.
Do Not Synchronize Pre-boot and
Windows passwords
The Pre-boot and OS passwords on a computer
are not synchronized by Endpoint Security.