ThinkPad E470 - Setting the Security Chip

•Setapower-onpasswordaswellasaharddiskpassword.Forsecurity,alongerpasswordis
recommended.
•TheharddiskdrivebuiltintoyourcomputercanbeprotectedbyUEFIBIOS.Toprovidereliablesecurity,
usethesecuritychipandasecurityprogramwiththeTrustedPlatformModule(TPM)management
feature.See“Settingthesecuritychip”onpage39
.
•IfaDiskEncryptionstoragedriveisinstalledinyourcomputer,ensuretoprotectthecontentsofyour
computerfromunauthorizedaccessbyuseofdriveencryptionsoftware,suchasMicrosoftWindows
BitLocker
®
DriveEncryption.
•Beforeyoudisposeof,sell,orhandoveryourcomputer,deletethedatastoredonit.Formoreinformation,
see“Deletingdatafromyourstoragedrive”onpage41
.
UsingWindowsBitLockerDriveEncryption
Tohelpprotectyourcomputeragainstunauthorizedaccess,usethedriveencryptionsoftware,suchas
WindowsBitLockerDriveEncryption.
WindowsBitLockerDriveEncryption(referredtoasBitLocker)isanintegralsecurityfeatureofsomeeditions
oftheWindowsoperatingsystem.Itcanhelpyouprotecttheoperatingsystemanddatastoredonyour
computer,evenifyourcomputerislostorstolen.BitLockercanencryptalluserandsystemfiles,including
theswapandhibernationfiles.
BitLockerusestheTPMtoprovideenhancedprotectionforyourdataandtoensureearlybootcomponent
integrity.AcompatibleTPMisdefinedasaV2.0TPM.
TochecktheBitLockerstatus,gotoControlPanel,viewControlPanelbyCategory,andclickSystemand
Security➙BitLockerDriveEncryption.
Formoreinformation,seethehelpsystemoftheWindowsoperatingsystem,orsearchfor“Microsoft
WindowsBitLockerDriveEncryptionStep-by-StepGuide”ontheMicrosoftWebsite.
DiskEncryptionharddiskdriveandEncryptionsolid-statedrive
SomemodelscontaintheDiskEncryptionharddiskdrive,Encryptionsolid-statedrive,orEncryptionhybrid
drive.Thisencryptiontechnologyhelpstoprotectyourcomputeragainstsecurityattacksonmedia,NAND
flash,ordevicecontrollersbyuseofahardwareencryptionchip.Fortheefficientuseoftheencryption
feature,setaharddiskpasswordfortheinternalstoragedrive.
Settingthesecuritychip
Strictsecurityrequirementsareimposedonnetworkclientcomputersthattransferconfidentialinformation
electronically.Dependingontheoptionsyouordered,yourcomputermighthaveanembeddedsecuritychip
(acryptographicmicroprocessor).Withthesecuritychip,youcandothefollowing:
•Protectyourdataandsystem
•Strengthenaccesscontrols
•Securecommunications
Beforeyoustart,printtheseinstructions.
TosetanitemontheSecurityChipsubmenu,dothefollowing:
1.Restartthecomputer.Whenthelogoscreenisdisplayed,pressF1tostarttheThinkPadSetupprogram.
2.SelectSecurity➙SecurityChipbyusingthedirectionalkeys.
3.PressEnter.TheSecurityChipsubmenuopens.
Chapter4.Security39