VIP Policy Configuration

Once you have initiated the auto-upgrade, the new version of the Trusted Device credential immediately begins to roll out to all of your Registered Computer credential users. Downgrading to an earlier version of Registered Computer requires manual intervention by the user and the VIP administrator. As a result, Symantec recommends that you do not attempt to return your users to the previous version.

To downgrade users to earlier versions of the Registered Computer credential:

Disable the auto-upgrade to Registered Computer feature:

Access VIP Manager.

Click Policies in the navigation bar at the top of the screen.

In the VIP Policy Configuration page, click Edit.

Under Remembered Devices, select No for Auto-upgrade to Trusted Device.

Each user that previously upgraded the Registered Computer credential needs to manually uninstall the credential and reinstall the earlier version:

Have the user run the uninstall script. The uninstall script is available from the Self Service Portals Diagnostics page.

The next time the user attempts to sign in, VIP prompts the user to remember the device and install the earlier version of the credential.

The user can verify that the credential has been successfully downgraded by viewing the credential details in the Self Service Portal Diagnostics page. Alternatively, you can verify that users have successfully downgraded by using VIP Manager to export credential details.

See Identifying Users with Trusted Device Credentials.