WindowsBitLockerDriveEncryptionisanintegralsecurityfeatureoftheWindows7andWindows8
operatingsystems.ItissupportedintheUltimateandEnterpriseeditionsoftheWindows7andProfessional
andEnterpriseeditionsoftheWindows8operatingsystem.
BitLockerusesaTrustedPlatformModuletoprovideenhancedprotectionforyourdataandtoensureearly
bootcomponentintegrity.AcompatibleTPMisdenedasaV1.2TPM.
TochecktheBitLockerstatus,gotoControlPanel,andclickSystemandSecurity➙BitLockerDrive
Encryption
FordetailsaboutWindowsBitLockerDriveEncryption,seetheWindowsHelpandSupport,orsearchfor
“MicrosoftWindowsBitLockerDriveEncryptionStep-by-StepGuide”ontheMicrosoftWebsite.
DiskEncryptionharddiskdriveandEncryptionsolidstatedrive
SomemodelscontaintheDiskEncryptionharddiskdriveorEncryptionsolidstatedrive.Thisfeature
helpstoprotectyourcomputeragainstsecurityattacksonmedia,NANDashordevicecontrollersbyuse
ofahardwareencryptionchip.Fortheefcientuseoftheencryptionfeature,besuretosetaharddisk
passwordfortheinternalstoragedevice.
Settingthesecuritychip
Strictsecurityrequirementsareimposedonnetworkclientcomputersthattransfercondentialinformation
electronically.Dependingontheoptionsyouordered,yourcomputermighthaveanembeddedsecurity
chip,acryptographicmicroprocessor.Withthesecuritychip,youcandothefollowing:
•Protectyourdataandsystem
•Strengthenaccesscontrols
•Securecommunications
Settingthesecuritychip
ThechoicesofferedontheSecurityChipsubmenuundertheSecuritymenuofThinkPadSetupareas
follows:
•SecurityChip:activate,inactivate,ordisablethesecuritychip.
•SecurityReportingOptions:enableordisableeachsecurityreportingoption.
•ClearSecurityChip:cleartheencryptionkey.
Notes:
1.EnsurethatthesupervisorpasswordhasbeensetinThinkPadSetup.Otherwiseanyonecanchange
thesettingsforthesecuritychip.
2.IfyouareusingClientSecuritySolution,handlethesecuritychipbydoingthefollowing:
•Donotclearthesecuritychip.Ifyoudo,thefunctionsassignedtothekeyswillbeerased.
•Donotdisablethesecuritychip.Ifyoudo,ClientSecuritySolutionwillnotwork.
3.Ifthesecuritychipisremovedorreplaced,oranewonehasbeenadded,thecomputerwillnotstart.
Youwillhearfourcyclesoffourbeepseach.
4.Ifthesecuritychipisinactiveordisabled,theClearSecurityChipoptionwillnotbedisplayed.
5.Whenyouclearthesecuritychip,besuretoturnyourcomputeroffandthenturnitonagainafteryou
setthesecuritychiptoActive.Otherwise,theClearSecurityChipoptionisnotdisplayed.
TosetanitemontheSecurityChipsubmenu,dothefollowing:
1.Printtheseinstructions.
Chapter4.Security53