User guide

FordetailsaboutWindowsBitLockerDriveEncryption,seetheWindows7helpinformationsystem,or
searchfor“MicrosoftWindowsBitLockerDriveEncryptionStep-by-StepGuide”ontheMicrosoftWebsite.
DiskEncryptionharddiskdriveandEncryptionsolidstatedrive
SomemodelscontaintheDiskEncryptionharddiskdriveorEncryptionsolidstatedrive.Thisfeature
helpstoprotectyourcomputeragainstsecurityattacksonmedia,NANDashordevicecontrollersbyuse
ofahardwareencryptionchip.Fortheefcientuseoftheencryptionfeature,besuretosetaharddisk
passwordfortheinternalstoragedevice.
Settingthesecuritychip
Strictsecurityrequirementsareimposedonnetworkclientcomputersthattransfercondentialinformation
electronically.Dependingontheoptionsyouordered,yourcomputermighthaveanembeddedsecuritychip,
acryptographicmicroprocessor.WiththesecuritychipandClientSecuritySolution,youcandothefollowing:
•Protectyourdataandsystem
•Strengthenaccesscontrols
•Securecommunications
Settingthesecuritychip
ThechoicesofferedontheSecurityChipsubmenuundertheSecuritymenuofThinkPadSetupareas
follows:
•SecurityChip:Activate,inactivate,ordisablethesecuritychip.
•SecurityReportingOptions:Enableordisableeachsecurityreportingoption.
•ClearSecurityChip:cleartheencryptionkey.
•PhysicalPresenceforProvisioning:Enableordisabletheconrmationmessagewhenyouchangethe
settingsofthesecuritychip.
•PhysicalPresenceforClear:Enableordisabletheconrmationmessagewhenyouclearthesecurity
chip.
Notes:
1.EnsurethatthesupervisorpasswordhasbeensetinThinkPadSetup.Otherwiseanyonecanchange
thesettingsforthesecuritychip.
2.IfyouareusingClientSecuritySolution,handlethesecuritychipbydoingthefollowing:
•Donotclearthesecuritychip.Ifyoudo,thefunctionsassignedtothekeyswillbeerased.
•Donotdisablethesecuritychip.Ifyoudo,ClientSecuritySolutionwillnotwork.
3.Ifthesecuritychipisremovedorreplaced,oranewonehasbeenadded,thecomputerwillnotstart.
Youwillhearfourcyclesoffourbeepseach.
4.Ifthesecuritychipisinactiveordisabled,theClearSecurityChipoptionwillnotbedisplayed.
5.Whenyouclearthesecuritychip,besuretoturnyourcomputeroffandthenturnitonagainafteryou
setthesecuritychiptoActive.Otherwise,theClearSecurityChipoptionisnotdisplayed.
TosetanitemontheSecurityChipsubmenu,dothefollowing:
1.Printtheseinstructions.
2.Saveallopenles,andexitallapplications.
3.Turnyourcomputeroffandthenturnitonagain.
4.Whenthelogoscreenisdisplayed,pressF1.TheThinkPadSetupprogrammainmenuopens.
Chapter4.Security53