Lenovo ThinkPad T520 (English) User Guide - Page 121

Hard disk security, Drive Encryption in Windows 7 and Windows Vista. Refer to Using - ssd

Page 121 highlights

3. Follow step 11 and step 12 above in "Setting a supervisor password" on page 102 to change your supervisor password. To remove the password, do the following: 1. In the Enter Current Password field, type the current supervisor password. 2. Leave the Enter New Password and Confirm New Password fields in blank. 3. Follow step 11 and step 12 above in "Setting a supervisor password" on page 102 to remove your supervisor password. Hard disk security Your computer supports an enhanced security solution for solid state drive or hard disk drive. To protect passwords from unauthorized security attacks, several of the latest technologies and algorithms are integrated into UEFI BIOS and hardware design of ThinkPad notebooks. To maximize security, do the following: 1. Set a power-on password as well as a hard disk password for your internal solid state drive or hard disk drive. Refer to the procedures in "Power-on password" on page 98 and "Hard disk passwords" on page 99. For security, a longer password is recommended. 2. To provide reliable security for UEFI BIOS, use the security chip and a security application with a Trusted Platform Module management feature. Refer to "Setting the security chip" on page 104. Note: Microsoft Windows 7 and Windows Vista support TPM management feature. 3. If a Disk Encryption HDD and Encryption SSD is installed in your computer, be sure to protect the contents of your computer memory from unauthorized access by use of drive encryption software, such as Microsoft Windows BitLocker® Drive Encryption in Windows 7 and Windows Vista. Refer to "Using Windows BitLocker Drive Encryption" on page 103. 4. Before you dispose of, sell, or hand over your computer, make sure to delete data stored on it. Refer to "Notice on deleting data from your hard disk drive or solid state drive" on page 109. Notes: The following drives can be protected by UEFI BIOS: • The hard disk drive built into your computer. • The hard disk drive installed in the serial Ultrabay enhanced. Note: You can install a 9.5-mm-thick serial Ultrabay slim or a 12.7-mm-thick serial Ultrabay enhanced device in the serial Ultrabay enhanced. Using Windows BitLocker Drive Encryption To help protect your computer from being subject to unauthorized access, be sure to use drive encryption software, such as Windows BitLocker Drive Encryption. Windows BitLocker Drive Encryption is an integral security feature of Windows 7 and Windows Vista. It is supported in Ultimate and Enterprise editions of Windows 7 and Windows Vista. It can help you protect the operating system and data stored in your computer data, even if your computer is lost or stolen. BitLocker works by encrypting all user and system files, including the swap and hibernation files. BitLocker uses a Trusted Platform Module to provide enhanced protection for your data and to ensure early boot component integrity. A compatible TPM is defined as a V1.2 TPM. To check the BitLocker status, do the following: • For Windows 7: Click Start ➙ Control Panel ➙ System and Security ➙ BitLocker Drive Encryption. Chapter 4. Security 103

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297

3. Follow step 11 and step 12 above in “Setting a supervisor password” on page 102 to change your
supervisor password.
To remove the password, do the following:
1. In the
Enter Current Password
field, type the current supervisor password.
2. Leave the
Enter New Password
and
Confirm New Password
fields in blank.
3. Follow step 11 and step 12 above in “Setting a supervisor password” on page 102 to remove your
supervisor password.
Hard disk security
Your computer supports an enhanced security solution for solid state drive or hard disk drive. To protect
passwords from unauthorized security attacks, several of the latest technologies and algorithms are
integrated into UEFI BIOS and hardware design of ThinkPad notebooks.
To maximize security, do the following:
1. Set a power-on password as well as a hard disk password for your internal solid state drive or hard disk
drive. Refer to the procedures in “Power-on password” on page 98 and “Hard disk passwords” on page
99. For security, a longer password is recommended.
2. To provide reliable security for UEFI BIOS, use the security chip and a security application with a Trusted
Platform Module management feature. Refer to “Setting the security chip” on page 104.
Note:
Microsoft Windows 7 and Windows Vista support TPM management feature.
3. If a Disk Encryption HDD and Encryption SSD is installed in your computer, be sure to protect the
contents of your computer memory from unauthorized access by use of drive encryption software, such
as Microsoft Windows BitLocker
®
Drive Encryption in Windows 7 and Windows Vista. Refer to “Using
Windows BitLocker Drive Encryption” on page 103.
4. Before you dispose of, sell, or hand over your computer, make sure to delete data stored on it. Refer to
“Notice on deleting data from your hard disk drive or solid state drive” on page 109.
Notes:
The following drives can be protected by UEFI BIOS:
The hard disk drive built into your computer.
The hard disk drive installed in the serial Ultrabay enhanced.
Note:
You can install a 9.5-mm-thick serial Ultrabay slim or a 12.7-mm-thick serial Ultrabay enhanced
device in the serial Ultrabay enhanced.
Using Windows BitLocker Drive Encryption
To help protect your computer from being subject to unauthorized access, be sure to use drive encryption
software, such as Windows BitLocker Drive Encryption.
Windows BitLocker Drive Encryption is an integral security feature of Windows 7 and Windows Vista. It is
supported in Ultimate and Enterprise editions of Windows 7 and Windows Vista. It can help you protect the
operating system and data stored in your computer data, even if your computer is lost or stolen. BitLocker
works by encrypting all user and system files, including the swap and hibernation files.
BitLocker uses a Trusted Platform Module to provide enhanced protection for your data and to ensure early
boot component integrity. A compatible TPM is defined as a V1.2 TPM.
To check the BitLocker status, do the following:
For Windows 7: Click
Start
Control Panel
System and Security
BitLocker Drive Encryption
.
Chapter 4
.
Security
103