Manual Removal of Fingerprints

Problem:

In a case in which user enrollment cannot be removed through the Enrollment Wizard or EMBASSY Trust Suite has been removed from a system, it may be necessary for users to manually remove these fingerprints.

Solution:

Please select a platform:

What fingerprints do you wish to remove?
What version of client software are you running?

What fingerprints do you wish to remove?

What fingerprints do you wish to remove?

Delete Fingerprints for both Windows & Preboot Authentication

Locate the UCS2.0 folder and rename it to UCS2.0_old. The UCS folder will be located at the following path:
  • XP: C:Documents and SettingsAll UsersApplication DataWave Systems CorpUCS2.0
  • Vista: C:Program DataWave Systems Corp.UCS 2.0
  • Windows 7: C:Program DataWave Systems Corp.UCS 2.0
Clear the fingerprints from the Credential Vault using the following process:
  1. Open a command prompt by going to Start > All Programs > Accessories > Command Prompt. (Note: Vista users will need to right click Command Prompt and select “Run as Administrator”)
  2. Navigate to the Dell Preboot Manager folder by typing the following:
    • cd C:Program FilesWave Systems CorpDell Preboot Manager
  3. Type the following to clear the Credential Vault:
    • PrebootEnrollmentUtil.exe x systempassword
      (Note: In the above line, systempassword should be changed to be your system password)
All fingerprints stored in the Credential Vault will be deleted.

Delete Fingerprints for Windows Login

Locate the UCS2.0 folder and rename it to UCS2.0_old. The UCS folder will be located at the following path:
  • XP: C:Documents and SettingsAll UsersApplication DataWave Systems CorpUCS2.0
  • Vista: C:Program DataWave Systems Corp.UCS 2.0
  • Windows 7: C:Program DataWave Systems Corp.UCS 2.0
Clear the fingerprints from the UPEK Fingerprint Reader using the following process:
  1. Download the DeleteUsers Utility (listed below) and unzip the files to your desktop.
  2. Double click DeleteUsers.exe to run the utility.
  3. You will see a list of users who currently have fingerprints enrolled on the UPEK device. Double click a user to delete all fingerprints currently saved on the UPEK device for that user.
  4. Repeat the process for additional users.

Downloads:

DeleteUsers Utility:
http://www.wave.com/support/downloads/DeleteUsers.zip

Delete Fingerprints for Preboot Authentication

To clear Preboot Enrollment manually, you must have access to EMBASSY Security Center or the Dell BIOS. Clearing Preboot Enrollment involves a series of clearing various BIOS level passwords. You will need to know these passwords in order to clear them.

Note: If you have forgotten a BIOS password, you will need to contact Dell Customer Support for assistance in recovering the password.
  • To perform these steps in ESC, open ESC, navigate to the Preboot Manager section, select Advanced, and select the BIOS Passwords tab.
  • To perform these steps in the Dell BIOS, reboot the system and press F2 at the Dell Splash Screen to enter the BIOS and navigate to the passwords section.
  1. If you currently have a System password set, change the password to a null value and apply the change to clear it. If you do not have a System password set, please skip to step 2.
  2. To clear Preboot Enrollment, the Administrator password must be cleared. The actual act of clearing this password will clear Preboot Enrollment as well. Please follow the appropriate step below depending on whether you currently have an Administrator password set or not:
    • If you currently have an Administrator password set, simply change the password to a null value and apply the change to clear it as well as Preboot Enrollment.
    • If you do not currently have an Administrator password set, you will need to first create one. Set the Administrator password to a simple temporary value such as “1234” and apply the change. Next, change the password to a null value and apply the change to clear it as well as Preboot Enrollment.
Preboot Authentication should now be cleared along with any fingerprints enrolled for Preboot Authentication.

Delete Fingerprints for both Windows & Preboot Authentication

To clear all fingerprints enrolled for both Windows and Preboot Authentication, please use the following procedure:
  1. Open EMBASSY Security Center and navigate to Platform Security Modules > Dell ControlVault.
  2. Select the Clear All button to clear all credentials for all users.
  3. Select the Clear button to clear all credentials for the current user.
If you cannot select one of the options above (because the option is grayed out or unavailable), please fill out a Support Request Form describing the steps you have taken.

Article ID: ESC-026
Last Reviewed: April 19, 2010

 

Feedback on this article:
Did this article solve your problem? Yes No
Comments: