Lenovo ThinkPad T400 (English) Hardware Password Manager Deployment Guide - Page 39

Scenario 6 - Replace the system board, Scenario 7 - Add a hard disk drive - replacement battery

Page 39 highlights

Hardware Password Manager, the BIOS will clear the hardware passwords and delete the local hardware account and SST. Scenario 6 - Replace the system board When the system board is replaced, the POP, SVP, hardware account, and server credentials no longer exist on the system. Only the HDPs remain set. In this case, you must manually clear the HDP in the BIOS setup, start the machine, and re-register in Hardware Password Manager using the Client Portal. In order to clear the HDP, you must enter it manually. You can obtain it from the ThinkManagement Console. You must have the HDD ID for the hard disk in order to locate the correct HDP. The HDD ID can be retrieved using a Lenovo-supplied Hardware Password Manager DOS utility. When a system board is moved from one system to another system, it is assumed that the system board is not registered in Hardware Password Manager. You must clear or disable Hardware Password Manager prior to redeploying the system board in the field. • Desktop systems - If the system board was not deregistered, you can remove the CMOS battery to clear the POP/SVP, then enter BIOS setup and disable Hardware Password Manager • ThinkPad - Removing the CMOS battery will not clear the SVP - you must obtain the SVP from the ThinkManagement Console in order to enter the BIOS setup and disable Hardware Password Manager. Note: When replacing a system board, you must reset the machine type/model and serial number to match the correct values prior to registering in Hardware Password Manager. When re-registering the client system with the new system board in the same Hardware Password Manager server domain, the server will recognize that the machine is already registered (i.e. machine/user/hdd instances and hardware account backup already exist) and clear all of the structures on the server before proceeding with the registration. Scenario 7 - Add a hard disk drive When a hard disk is added to a system registered in Hardware Password Manager, you must renew the hardware account in order for Hardware Password Manager to assign a password to the new hard disk. Renew Hardware Account will renumber the hard disks in the machine and set passwords on all detected drives. If the hard disk already has a HDP set, you must manually clear the HDP before running Renew Hardware Account. If you do not know the HDP, then the hard disk can no longer be used. In order to clear the HDP, you must have the HDD ID and the system ID in order to obtain the correct HDP and SVP. The HDD ID and machine ID can be retrieved using a Lenovo supplied Hardware Password Manager DOS utility. Note: The SVP is not required to clear a HDP for ThinkPad systems. When an unprotected hard disk is added to a Hardware Password Manager registered system, the BIOS will detect that the hard disk is not protected. In this case, when logging into Windows, the Client Portal will inform the user that an unprotected device (HDD) was found and ask them if they want to renew the hardware. Scenario 8 - Replace or move a hard disk drive If the hard disk of a system registered with Hardware Password Manager fails and must be replaced, there are three possibilities. Chapter 6. Scenarios 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60

Hardware Password Manager, the BIOS will clear the hardware passwords and delete the local hardware
account and SST.
Scenario 6 - Replace the system board
When the system board is replaced, the POP, SVP, hardware account, and server credentials no longer exist
on the system. Only the HDPs remain set. In this case, you must manually clear the HDP in the BIOS setup,
start the machine, and re-register in Hardware Password Manager using the Client Portal. In order to clear
the HDP, you must enter it manually. You can obtain it from the ThinkManagement Console.
You must have the HDD ID for the hard disk in order to locate the correct HDP. The HDD ID can be retrieved
using a Lenovo-supplied Hardware Password Manager DOS utility.
When a system board is moved from one system to another system, it is assumed that the system board is
not registered in Hardware Password Manager. You must clear or disable Hardware Password Manager
prior to redeploying the system board in the field.
Desktop systems
- If the system board was not deregistered, you can remove the CMOS battery to clear
the POP/SVP, then enter BIOS setup and disable Hardware Password Manager
ThinkPad
- Removing the CMOS battery will not clear the SVP – you must obtain the SVP from the
ThinkManagement Console in order to enter the BIOS setup and disable Hardware Password Manager.
Note:
When replacing a system board, you must reset the machine type/model and serial number to match
the correct values prior to registering in Hardware Password Manager.
When re-registering the client system with the new system board in the same Hardware Password Manager
server domain, the server will recognize that the machine is already registered (i.e. machine/user/hdd
instances and hardware account backup already exist) and clear all of the structures on the server before
proceeding with the registration.
Scenario 7 - Add a hard disk drive
When a hard disk is added to a system registered in Hardware Password Manager, you must renew the
hardware account in order for Hardware Password Manager to assign a password to the new hard disk.
Renew Hardware Account will renumber the hard disks in the machine and set passwords on all detected
drives.
If the hard disk already has a HDP set, you must manually clear the HDP before running Renew Hardware
Account. If you do not know the HDP, then the hard disk can no longer be used.
In order to clear the HDP, you must have the HDD ID and the system ID in order to obtain the correct HDP
and SVP. The HDD ID and machine ID can be retrieved using a Lenovo supplied Hardware Password
Manager DOS utility.
Note:
The SVP is not required to clear a HDP for ThinkPad systems.
When an unprotected hard disk is added to a Hardware Password Manager registered system, the BIOS will
detect that the hard disk is not protected. In this case, when logging into Windows, the Client Portal will
inform the user that an unprotected device (HDD) was found and ask them if they want to renew the hardware.
Scenario 8 - Replace or move a hard disk drive
If the hard disk of a system registered with Hardware Password Manager fails and must be replaced, there
are three possibilities.
Chapter 6
.
Scenarios
31