Welcome

Intel powered classmate PC Theft Deterrent Agent runs on the student's Intel powered classmate PC, which is specially designed with security in mind.

The Intel powered classmate PC Theft Deterrent Agent software provides a simple user interface which to do the following:

- Set up the different network options for different situations.

- Display the current status of the certificate and device information.

- Check the authorization certificate each time the PC is started.

- Remind the owner to get a new authorization certificate if the current certificate is going to expire or has already expired.

The Intel powered classmate PC owner obtains an authorization certificate periodically from the Intel powered classmate PC Theft Deterrent Server. The authorization certificate is the one and only passport for the Intel powered classmate PC. Intel powered classmate PC Theft Deterrent Agent software verifies this authorization certificate and determines how long the Intel powered classmate PC can be used.

# Table of Contents

Preface

General introduction

Using the Intel powered classmate PC Theft Deterrent Agent

Frequently Asked Questions

Appendix

# Preface

Target readers

The administrator of the Intel powered classmate PC Theft Deterrent Agent

Structure of the manual

The Intel powered classmate PC Theft Deterrent Agent User Manual is consisted of following parts:

General introduction

Chapter1. General Introduction

To inform the user preparatory by introducing the functions of the software and the requirements on both software and hardware

The usage of the Intel powered classmate PC Theft Deterrent Agent software

Chapter2. The Usage of the Intel powered classmate PC Theft Deterrent Agent software

To introduce how to use of the Intel powered classmate PC Theft Deterrent Agent software, and also what you should pay attention to.

FAQ

Chapter3. To provide technical supports by introducing the solutions to some frequently asked questions.

Appendix

To provide all available error messages.

Skills in using the manual

| [Attention] | This is what you should pay attention to, or it will cause failure or invalidation.
| [Warning] | This is what you should pay special attention to, or it will cause damage that cannot be recovered.
| [Hint] | This is some useful skill.
| [Note] | This is some explanation for the concept or word which is difficult to understand.

# General Introduction

The Intel powered classmate PC Theft Deterrent Agent runs on the student's Intel powered classmate PC, which is specially designed with security in mind. The Intel powered classmate PC Theft Deterrent Agent supports English, Spanish, Portuguese.

The Intel powered classmate PC Theft Deterrent Agent software provides a simple user interface which to do the following:

- Set up the different network options for different situations.

- Display the current status of the certificate and device information.

- Check the authorization certificate each time the PC is started.

- Remind the owner to get a new authorization certificate if the current certificate is going to expire or has already expired.

The Intel powered classmate PC owner obtains an authorization certificate periodically from the Intel powered classmate PC Theft Deterrent Server. The authorization certificate is the one and only passport for the Intel powered classmate PC. The Intel powered classmate PC Theft Deterrent Agent software verifies this authorization certificate and determines how long the Intel powered classmate PC can be used.

If a device is stolen, the Intel powered classmate PC Theft Deterrent Server will generate a special one time boot certificate request which Expiration Date is today and Boot Count is 0. Once the Intel powered classmate PC receives this certificate, it will no longer operate after reboot the system. This feature is intended to reduce the risk of the theft of Intel powered classmate PCs.

## System requirements

Hardware | CPU | Intel®Celeron®CPU 900MHz
Memory | DDR333 256M
Hard disk | 2G
Operating Systems | Ubuntu

Table 1 - System Requirements

# Using the Intel powered classmate PC Theft Deterrent Agent

## Icon on System Tray

The Intel powered classmate PC Theft Deterrent Agent program will start up automatically when the OS starts up. The program will be minimized, displaying an icon in the Windows system tray. The color of the icon changes to indicate different status. When the user moves the mouse over the icon, it will display tool tip message.

Normal status The tool tip will display the "Normal" message.

Warning status It indicates this PC has less than 2 days or less than 5 times to expire. The tool tip will display the "Warning" message. The Theft Deterrent Agent will download common boot certificate automatically.

Not activated status It indicates that this PC account has not been approved at the theft deterrent server. The tool tip will display the "Not activated" message.

Cannot connect with server status It indicates that this PC cannot connect with server. The tool tip will display the "Cannot connect with server." message. Please check the network to make the Theft Deterrent Agent could connect with Theft Deterrent Server.

Cannot connect with server and not activated status It indicates that this PC cannot connect with server and the account has not been approved. The tool tip will display the "Cannot connect with server." message.

## Intel powered classmate PC Theft Deterrent Agent GUI

There are four menus when right-click the icon in the system tray: Log onto server, Settings, help and about. These menus are described in detail in the following sections. To launch the Intel powered classmate PC Theft Deterrent Agent GUI, double-click the icon or choose the menu of Settings.

Figure 1 - Menus

### Settings

This form configures the server address and proxy networking address.

1. Theft Deterrent Agent can find the server address automatically after theft deterrent server installation is completed. Also you can input the theft deterrent server address manually, click Apply or OK to store the information.

Figure 2 - Set Server Address

| [Hint] Clicking Apply or OK only stores the Intel powered classmate PC Theft Deterrent Server address information, but does not trigger an attempt to link to the server. The Intel powered classmate PC Theft Deterrent Agent will verify the server address by attempting to download the certificate.

2. If you use proxy server, it gets IE proxy automatically, then you can enter user name and password for the proxy server. Click Apply or OK to store the information.

Figure 3 - Set Proxy Information

| [Hint] Clicking Apply or OK only stores the Intel powered classmate PC Theft Deterrent Server proxy information, but does not trigger an attempt to link to the server. The Intel powered classmate PC Theft Deterrent Agent will verify the server address by attempting to download the certificate.

### Log onto server menu

1. This menu leads student to their login page. Figure below shows the first time login page. Please set your personal password. Next time you can login the page by your password.

Figure 4 - Student Login

2. After login successfully, following picture appears.

Figure 5 - Update Information

To update student name, date of birth and password, input valid information, then click Save. To clear all fields, click Reset.

3. Unlock Code Retrieval

To generate unlock code, and you could click Unlock Code Retrieval in the left-hand column of the window.

Figure 6 - Unlock Code Retrieval

Input boot tick, then click Generate Unlock Code, following picture appears

Figure 7 - Generate Unlock Code Successfully

### Help Menu

This menu displays Help for using Intel powered classmate PC Theft Deterrent Agent.

### About Menu

This menu displays some message about Intel powered classmate PC Theft Deterrent Agent.

Figure 8 - About Form

##

## Automatic download

1. The Intel powered classmate PC Theft Deterrent Agent automatically downloads a new certificate after the PC launches up, regardless of the agent's status. That is, regardless of whether the current status is normal, warning, Not Activated status, or cannot connect with server status, the agent will try to automatically download a certificate for 10 times after system boot.

   | [Hint] It has 10 seconds interval during every time, if the agent receives a certificate successfully, it will stop trying to download certificate again at this 10 times.

2. Automatic downloads during every 10 minutes

   The Intel powered classmate PC Theft Deterrent Agent tries to download a new certificate automatically every 10 minutes after the PC launches up.

   | [Hint] If the Intel powered classmate PC Theft Deterrent Agent is in warning status, it will try downloading Common Boot Certificate, After the agent downloads Common Boot Certificate successfully, it will not download Common Boot Certificate till next warning status.

   | [Hint] If the Intel powered classmate PC Theft Deterrent Agent receives a certificate successfully, and the certificate is not Common Boot Certificate, it will stop downloading certificate till next reboot.

3. If the certificate which the Intel powered classmate PC Theft Deterrent Agent receives is Shared Secret, One-time Boot Certificate, Auto Provision Package, Server Public Key or Intel Public Key, the following message is displayed. You can choose "Reboot now" to reboot the PC immediately. If you don't want to reboot the PC now, you can choose "Cancel"

   Figure 9 - Reboot Information Dialog

   | [Hint] To make the certificate be applied, suggest you reboot the PC right now

## Input Unlock Code

If the system date exceeds the expiration date or the boot counter equals zero, the PC's BIOS will refuse to load the OS. If the system does not pass the pre-boot check, the BIOS will provide an opportunity for the user to input an Unlock Code, as shown below. The user can obtain this code from his login page, refer to chapter 2.2.2.

After obtaining an "unlock code," the user can perform the following steps in the BIOS.

The BIOS screen provides the following information:

1. Sorry, the computer boot certificate has expired and the machine is now locked.

2. Please contact your computer administrator to obtain an unlock code for your computer to be unlocked..

3. Unique Hardware ID:

4. Boot Tick:

5. Are you ready to enter the Unlock code? (Press Y for Yes, or N for NO. System will shut down if you type N)

6. Please enter a 10-digit number.

If the code is valid, the BIOS will set 2 reserved days and 5 boot times to let the user update the Boot Certificate immediately. The BIOS then loads the OS. If the code is not valid, the BIOS will display the following information:

1) Sorry the Unlock code you entered is wrong! Please try again.

2) Sorry, you have entered the wrong unlock code three times. The system will now shut down immediately.

## Parse the certificate in USB disk

If the PC is locked, you can get the certificates in USB disk from his or her IT Administrator, then insert the USB disk into the PC and press a special hotkey combination (Ctrl + Insert), the BIOS can parse the certificate automatically.

# Frequently Asked Questions

1. If the address of the server has been changed, need I change the server address manually?

   A: No need. The Intel powered classmate PC Theft Deterrent Agent can search the server address automatically when it found the server address is not correct.

2. Why didn't the Agent provide a startup short-cut and shutdown method?

   A: As a management program that is responsible for the maintenance of the system's state, the Intel powered classmate PC Theft Deterrent Agent should be kept running at all the time. Therefore the Intel powered classmate PC Theft Deterrent Agent is started when the computer is started and should not be shut down by the users.

3. If the Intel powered classmate PC Theft Deterrent Agent is shut down, does the theft-deterrent function still apply if the PC is stolen?

   A: Yes. Even if the Intel powered classmate PC Theft Deterrent Agent program is not running, the PC's BIOS will still not load the OS after expiration. Furthermore, the next time the PC is started, the Intel powered classmate PC Theft Deterrent Agent program will be loaded automatically at system startup.

4. Can I uninstall the Intel powered classmate PC Theft Deterrent Agent program? And if so, what will happen if I uninstall the Intel powered classmate PC Theft Deterrent Agent program?

   A: As a management program, the Intel powered classmate PC Theft Deterrent Agent should be kept running at all the time. But you can still uninstall Intel powered classmate PC Theft Deterrent Agent using provided uninstallation package.

5. The Classmate PC won't start, even though only one of the expiration conditions has been met (for example, the number of boots remaining is still OK, but the current date is past the expiration date).

   A: When either of the two expiration conditions (date or number of boots) is satisfied the Classmate PC will not start.

6. Will the Warning state affect the PC's functions (for example, some functions can't be performed)?

   A: NO. The Warning state simply tells the user to download a new Boot Certificate to maintain normal usage.

7. What is an Unlock code?

   A: The Unlock code allows the users to use the Classmate PC for 2099/12/31, 10 boots, even if they have not obtained a new Boot Certificate from the server. In these two days the users must obtain the new certificate by downloading one from the configured server.

8. Can the useable time of the PC be extended by modifying the PC's system time/date?

   A: Changing the system time/date can in fact extend the usable time of the PC. However, changing the system date/time will prevent the Intel powered classmate PC Theft Deterrent Agent from downloading a new Boot Certificate from the Intel powered classmate PC Theft Deterrent Server. Since the allowed number of system boots before expiration is not affected by a time/date change, the certificate will eventually expire once the allowed number of boots has been reached, regardless of whether the date of expiration is ever reached.

9. Why can't I visit Theft Deterrent Server in Firefox after the server is reinstalled? Firefox pops up one message box showing that the certificate invalid.

> A: If you select "Accept server certificate permanently" when you visit Theft Deterrent Server in Firefox, then you'll never be prompted to accept the certificate again. However, once the Theft Deterrent Server is installed again, you should manually delete the previous certificate from Firefox manually. Otherwise you can't visit the Theft Deterrent Server successfully using SSL because the certificate of the previous server conflicts with the new one.