Operation Manual

•Tochangethemasterharddiskpassword,typethecurrentmasterharddiskpasswordintheEnter
CurrentPasswordeld.ThentypethenewmasterharddiskpasswordintheEnterNewPassword
eld,andretypethepasswordyoujustenteredtoverifyitintheConrmNewPasswordeld.Press
Enter,andaSetupNoticewindowisdisplayed.PressF10toexitfromtheSetupNoticewindow.Boththe
userandmasterharddiskpasswordswillbechanged.
•Toremovethemasterharddiskpassword,typethecurrentmasterharddiskpasswordintheEnter
CurrentPasswordeld.ThenleavetheEnterNewPasswordandConrmNewPasswordeldsblank,
andpressEnter.ASetupNoticewindowisdisplayed.PressF10toexitfromtheSetupNoticewindow.
Boththeuserandmasterharddiskpasswordswillberemoved.
Supervisorpassword
ThesupervisorpasswordprotectsthesysteminformationstoredintheThinkPadSetup.Withoutit,noone
canchangethecongurationofthecomputer.Itprovidesthefollowingsecurityfeatures:
•Ifasupervisorpasswordisset,apasswordpromptappearswhenyoutrytostarttheThinkPadSetup.
Unauthorizeduserscannotgetaccesstocongurationdata.
•Thesystemadministratorcanusethesupervisorpasswordtogetaccesstoacomputereveniftheuserof
thatcomputerhassetapower-onpassword.Thesupervisorpasswordoverridesthepower-onpassword.
•Ifbothasupervisorpasswordandapower-onpasswordareset,youcandothefollowingonlyifyou
havethesupervisorpassword:
–Deletingthepower-onpassword
–Changingordeletingthesupervisorpassword
–EnablingordisablingtheInternalNetworkOptionROMfeature
–Changingdateandtime
–EnablingordisablingtheLockUEFIBIOSSettingfeature
–EnablingordisablingthePasswordatunattendedboot
–Specifyingtheminimumlengthforpower-onpasswordsandharddiskpasswords
–EnablingordisablingtheBootDeviceListF12Option
–EnablingordisablingtheBootOrderLock
–EnablingordisablingtheFlashBIOSUpdatingbyEnd-Usersfeature
–EnablingordisablingtheInternalNetworkdevice
–EnablingordisablingtheInternalWirelessdevice
–EnablingordisablingtheInternalBluetoothdevice
–EnablingordisablingtheInternalWirelessWANdevice
–EnablingordisablingtheSecuritymode
–EnablingordisablingtheReaderpriority
–Erasingthengerprintdata
Notes:
•ThesystemadministratorcansetthesamesupervisorpasswordonmanyThinkPadNotebookstomake
administrationeasier.
•ByenablingtheLockUEFISettingsinthePasswordmenuwhenyousetthesupervisorpassword,you
makeitimpossibleforanyonebutyoutomakechanges.
Settingasupervisorpassword
Onlyasystemadministratorwillbeabletoapplythisprocedure.
Chapter4.Security63