Password Synchronization

Pre-boot is a program that prevents the operating system from booting until the user authenticates. You can synchronize the Pre-boot and operating system passwords.

Notes and Recommendations:

• Password Synchronization only works if Pre-boot authentication is enabled.
• If you plan to use OneCheck Logon, we recommend that you keep the OS and Pre-boot passwords synchronized. This makes sure that both passwords are the same, and users can use each one, if necessary.
• If you use password synchronization, we recommend that users' Windows password and Pre-boot password have the same requirements. This prevents problems with the first Pre-boot logon, OneCheck Logon, and Single Sign-On.
• If the OneCheck User Settings policy is set to synchronize Pre-boot and Windows passwords, and a user changes his or her password, the change is automatically sent to all computers the user is authorized to access in Pre-boot.

  The password change is communicated to relevant clients as part of the regular heartbeat and sync messages between clients and servers. If a computer is not connected to an Endpoint Security Server when the password is changed, the change is sent to the computer after it connects to an Endpoint Security Server.

  In this situation, users might have to log in to Pre-boot one time with their old passwords before the client can connect to the server and get the updated credentials.

Select an Action to define if and how the passwords are synchronized:

Action	Description
Update Pre-boot password Upon Windows Password Change	When the OS password on a computer changes, the Pre-boot password is automatically changed.
Update Windows Password Upon Pre-boot Password Change	When the Pre-boot password on a computer changes, the OS password is automatically changed.
Bi-directional Update for Pre-boot and Windows Password Upon Change	If the Pre-boot or OS password on a computer changes, the password is automatically changed.
Do Not Synchronize Pre-boot and Windows passwords	The Pre-boot and OS passwords on a computer are not synchronized by Endpoint Security.