User's Manual

Table Of Contents
Setapower-onpasswordaswellasaharddiskpassword.Forsecurity,alongerpasswordis
recommended.
TheM.2solid-statedrivebuiltintoyourcomputercanbeprotectedbyUEFIBIOS.Toprovidereliable
security,usethesecuritychipandasecurityprogramwiththeTrustedPlatformModule(TPM)
managementfeature.See“Settingthesecuritychip”onpage53.
IfaDiskEncryptionstoragedriveisinstalledinyourcomputer,ensuretoprotectthecontentsofyour
computerfromunauthorizedaccessbyuseofdriveencryptionsoftware,suchasMicrosoftWindows
BitLocker
®
DriveEncryption.
Beforeyoudisposeof,sell,orhandoveryourcomputer,deletethedatastoredonit.Formoreinformation,
see“Deletingdatafromyourstoragedrive”onpage56.
UsingWindowsBitLockerDriveEncryption
Tohelpprotectyourcomputeragainstunauthorizedaccess,usethedriveencryptionsoftware,suchas
WindowsBitLockerDriveEncryption.
WindowsBitLockerDriveEncryption(referredtoasBitLocker)isanintegralsecurityfeatureofsomeeditions
oftheWindowsoperatingsystem.Itcanhelpyouprotecttheoperatingsystemanddatastoredonyour
computer,evenifyourcomputerislostorstolen.BitLockercanencryptalluserandsystemfiles,including
theswapandhibernationfiles.
BitLockerusestheTPMtoprovideenhancedprotectionforyourdataandtoensureearlybootcomponent
integrity.AcompatibleTPMisdefinedasaV2.0TPM.
TochecktheBitLockerstatus,gotoControlPanel,viewControlPanelbyCategory,andclickSystemand
SecurityBitLockerDriveEncryption.
Formoreinformation,seethehelpsystemoftheWindowsoperatingsystem,orsearchfor“Microsoft
WindowsBitLockerDriveEncryptionStep-by-StepGuide”ontheMicrosoftWebsite.
DiskEncryptionsolid-statedrive
SomemodelsmightcontaintheDiskEncryptionsolid-statedrive.Thisencryptiontechnologyhelpsto
protectyourcomputeragainstsecurityattacksonmedia,NANDflash,ordevicecontrollersbyuseofa
hardwareencryptionchip.Fortheefficientuseoftheencryptionfeature,setaharddiskpasswordforthe
internalstoragedrive.
Settingthesecuritychip
Strictsecurityrequirementsareimposedonnetworkclientcomputersthattransferconfidentialinformation
electronically.Dependingontheoptionsyouordered,yourcomputermighthaveanembeddedsecuritychip
(acryptographicmicroprocessor).Withthesecuritychip,youcandothefollowing:
Protectyourdataandsystem
Strengthenaccesscontrols
Securecommunications
Beforeyoustart,printtheseinstructions.
TosetanitemontheSecurityChipsubmenu,dothefollowing:
1.Restartthecomputer.Whenthelogoscreenisdisplayed,pressF1tostarttheThinkPadSetupprogram.
2.SelectSecuritySecurityChipbyusingthedirectionalkeys.
3.PressEnter.TheSecurityChipsubmenuopens.
Chapter5.Security53