EMBASSY Security Center - Nuvoton Edition (64-bit) 	            	(Build 02.05.01.001)

Copyright (c) 2003-2010, Wave Systems Corp. All rights reserved.

======================================================================================================

EMBASSY Security Center (ESC) provides TCG platform management functions, advanced 
user authentication functions, Trusted Drive management functions, and TPM key 
archive and restore functionality.

======================================================================================================

IMPORTANT NOTES: 

Firewalls and Antispyware Software
	Users running Firewall and/or Antispyware software may experience warnings from these
	tools when installing ESC.  When this occurs, users must IMMEDIATELY give permission 
	to the ESC installation to proceed.  Delay or denial of permission will result in an
	invalid installation.  Alternatively, users may temporarily disable Firewall and/or
	Antispyware software before installing ESC, then re-enable the Firewall and/or 
	Antispyware software after ESC installation is complete.

	In some situations, when upgrading ESC, the first login after the upgrade will take extra time 
	while the installation completes.  Users must let this process run to completion; failure 
	to do so can result in an incomplete installation of ESC.

======================================================================================================

Installation Requirements:

	Hardware:
		PC with a Pentium microprocessor, 300 MHz or greater
		VGA monitor or better, set to a resolution of 800 x 600 and 16 bit color,
		or better.
		Trusted Computing Group (TCG) compliant v1.2 Trusted Platform Module (TPM)
		(OPTIONAL) Biometric sensor for Fingerprint support

	Software:
		Microsoft(R) Windows(R) Windows 7 64 bit	
		Windows XP 64 bit with Service Pack 2 or higher
		Windows Vista 64 bit with Service Pack 1 or 2 
		Microsoft(R) Internet Explorer version 6.1 (or above)
	
	IF YOU HAVE A 32 BIT OPERATING SYSTEM YOU MUST NOT INSTALL THIS PACKAGE.
	VISIT HTTP://www.nuvoton.com to obtain the 64 bit version of this software.


Installation Procedure:

	User must have administrative privileges to install
	1.	If the process does not start automatically, run the "installer.exe" file.
	2.	The installation wizard will guide you through the installation
		and setup of the EMBASSY Security Center.

Upgrade:
	This package is intended for new platforms with a TPM Only.
	Please uninstall any existing versions of ESC before installing this software.

======================================================================================================

Limitations and Known Issues:

	General
	1.	Users with Targus Omnipass software must uninstall the Targus software 
		prior to installing ESC as the Targus Software is incompatible with ESC.
	2.	The original ESC installation media is required to perform a repair operation 
		from Add/Remove programs.
	3.	Upgrading or reinstallation of the Ntru Trusted Software Stack (TSS) requires 
		the file "tsp1.dll" be copied from the install location to the Windows System32 
		directory.  Typically this is from 
		"c:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin\" to 
		"C:\Windows\System32\"

	EMBASSY Security Setup Wizard
	1.	Limited users may have the TPM Ownership state reported incorrectly in the 
		EMBASSY Security Setup Wizard.  A user with administrator rights may take 
		ownership using the EMBASSY Security Center then the limited user may use 
		the EMBASSY Security Setup Wizard to configure settings.

	Secure Login 
	1.	For systems with external fingerprint sensors, ensure that the sensor is 
		connected prior to starting the fingerprint enrollment wizard.
	2.	TPM reset or replacement will require re-enrollment of all biometric data.
	3. 	Installing third party software that interacts with the Logon process may 
		interfere with the proper operation of the Wave Secure Login product and/or 
		prevent proper operation of the third party product.

	Trusted Drive Manager
	1.	Maximum Trusted Drive password length is 32 characters unless overwritten by the
		Windows password policies.

	EMBASSY Security Center
	1.	Some personal Firewall products may block access to the network/internet during 
		installation and execution of applications.  If you have a firewall configured to 
		block access then you must add the following list of applications to the list of 
		applications that are authorized access.  Failure to grant access to the following 
		applications may prevent ETS from installing or executing properly.  
		- Microsoft Windows Installer - %WINDIR%\system32\MSIExec.exe
		- Ntru TSS - %PROGRAMFILES%\NTRU Cryptosystems\NTRU TCG Software Stack\bin\
			tcsd_win32.exe
		- ESC - %PROGRAMFILES%\Wave Systems Corp\EMBASSY Security Center\
			EmbassySecurityCenter.exe
	2.	Attempting to change the TPM Owner Password with an incorrect password may result 
		in an error message while closing ESC.  The error message can be cleared by 
		clicking on 'Ok'.  No damage to the system or the data will result.
	3. 	If experiencing intermittent "Sensor lost focus" error messages 
		during fingerprint authentication, user should retry enrolling fingerprint 
		or restarting the application.
	4.	After a user has logged onto the system with a Biometric sensor, a user must 
		login without a fingerprint before removing the biometric sensor from the 
		machine.  If the Biometric sensor is removed and the user logs off, the GINA will 
		fail with a message that the device is missing and not allow any login until the 
		device is replaced.
	5. 	Users will be unable to log in using Wave GINA if LANDesk is enabled.  Users must
		disable LANDesk before enabling the Wave GINA.

	Archive and Restore
	1.	During disaster recovery, a User with Administrative Rights must restore keys from 
		KTM prior to a Limited Users attempting restore.  Once an Administrator has restored
		keys, restore will work for Limited Users as well.
	2.	Attempting to Archive immediately after taking TPM ownership will result
		in a "The Archive was not created successfully" message.  This occurs because 
		there are not yet TPM keys available to archive.  Please click on 'Ok' clear 
		the error message.  This message will occur in every case where there no TPM 
		secured keys in existence.  After TPM keys have been created, future archive 
		operations will succeed.
	3.	If the TPM on the platform is reset or replaced then all enrolled biometric data 
		is lost and each fingerprint must be re-enrolled.

======================================================================================================

Technical Support:

	For technical support questions please contact us at:
		http://www.nuvoton.com
