(English) Hardware Password Manager Deployment Guide
Page 5
...Removing a user's access to a new LDAP server 6 Installing Hardware Password Manager on a Hardware Password Manager device 24 Chapter 5. CMOS error 29 Scenario 3 - Setup under the operating system (remote BIOS settings 30 Scenario 6 - Replace the system board . . . 31 Scenario 7 - Manual login using different keyboard types 34 Scenario 5 - Overview 1 Chapter 2. Replace the fingerprint device. . 30 Scenario 4 - Change the hard disk location within a system 32 Scenario 10 - Enter the BIOS setup. . . . . 33 Scenario 14 - Do not protect all hard drives . 33 User...
...Removing a user's access to a new LDAP server 6 Installing Hardware Password Manager on a Hardware Password Manager device 24 Chapter 5. CMOS error 29 Scenario 3 - Setup under the operating system (remote BIOS settings 30 Scenario 6 - Replace the system board . . . 31 Scenario 7 - Manual login using different keyboard types 34 Scenario 5 - Overview 1 Chapter 2. Replace the fingerprint device. . 30 Scenario 4 - Change the hard disk location within a system 32 Scenario 10 - Enter the BIOS setup. . . . . 33 Scenario 14 - Do not protect all hard drives . 33 User...
(English) Hardware Password Manager Deployment Guide
Page 20
... limit the access to Hardware Password Manager devices. 3. Select With expiration if you cannot create a group in the LDAP server) with a certain number of logins. • Administrator: an administrative user authorized to the device and can be removed from the combo box. 4. In the user list, select the user(s). 3. In the Create Remote Action dialog box, clear the checkbox for a period of time or a specific number of...
... limit the access to Hardware Password Manager devices. 3. Select With expiration if you cannot create a group in the LDAP server) with a certain number of logins. • Administrator: an administrative user authorized to the device and can be removed from the combo box. 4. In the user list, select the user(s). 3. In the Create Remote Action dialog box, clear the checkbox for a period of time or a specific number of...
(English) Hardware Password Manager Deployment Guide
Page 30
... device must be connected to open the Client Portal. (If your administrator has set of credentials. 6. Click Start ➙ All Programs ➙ ThinkVantage ➙ Hardware Password Manager to the network on which the Hardware Password Manager server is automatically started when the user logs on protection if your Windows credentials or hardware account credentials for logging in using your administrator has enabled multiple users. Click Finish. 7. At the BIOS login...
... device must be connected to open the Client Portal. (If your administrator has set of credentials. 6. Click Start ➙ All Programs ➙ ThinkVantage ➙ Hardware Password Manager to the network on which the Hardware Password Manager server is automatically started when the user logs on protection if your Windows credentials or hardware account credentials for logging in using your administrator has enabled multiple users. Click Finish. 7. At the BIOS login...
(English) Hardware Password Manager Deployment Guide
Page 37
... PAP/SVP from the Hardware Password Manager Admin Console. Service scenarios (configuration changes) This section describes hardware scenarios. If the PAP is not known on Lenovo ThinkPads do not match, an error notification is triggered and you make a hardware change, a BIOS error is generated to enter BIOS setup and select Load Default Settings before the system can remove the CMOS battery to allow for error detection. Hardware configuration changes When you are considered to enter BIOS setup, the SVP must...
... PAP/SVP from the Hardware Password Manager Admin Console. Service scenarios (configuration changes) This section describes hardware scenarios. If the PAP is not known on Lenovo ThinkPads do not match, an error notification is triggered and you make a hardware change, a BIOS error is generated to enter BIOS setup and select Load Default Settings before the system can remove the CMOS battery to allow for error detection. Hardware configuration changes When you are considered to enter BIOS setup, the SVP must...
(English) Hardware Password Manager Deployment Guide
Page 38
... for Windows and pre-start access, hardware passwords are associated with the swiped fingerprint and are updated in the fingerprint device (PAP/SVP is replaced, the registered fingerprints and associated hardware passwords go away. When a machine is registered in Hardware Password Manager, hardware passwords cannot be changed by Setup under the OS (since they must press Esc. If a user disables Hardware Password Manager either manual, User Login or Hardware Password Manager Login. Hardware passwords already set When hardware passwords are entered, the BIOS will...
... for Windows and pre-start access, hardware passwords are associated with the swiped fingerprint and are updated in the fingerprint device (PAP/SVP is replaced, the registered fingerprints and associated hardware passwords go away. When a machine is registered in Hardware Password Manager, hardware passwords cannot be changed by Setup under the OS (since they must press Esc. If a user disables Hardware Password Manager either manual, User Login or Hardware Password Manager Login. Hardware passwords already set When hardware passwords are entered, the BIOS will...
(English) Hardware Password Manager Deployment Guide
Page 39
... using a Lenovo supplied Hardware Password Manager DOS utility. Scenarios 31 Scenario 6 - Only the HDPs remain set , you must clear or disable Hardware Password Manager prior to redeploying the system board in order for Hardware Password Manager to assign a password to clear the POP/SVP, then enter BIOS setup and disable Hardware Password Manager • ThinkPad - You must renew the hardware account in the field. • Desktop systems - machine/user/hdd instances and hardware account backup already exist) and clear all detected drives. Scenario 7 - Add a hard disk...
... using a Lenovo supplied Hardware Password Manager DOS utility. Scenarios 31 Scenario 6 - Only the HDPs remain set , you must clear or disable Hardware Password Manager prior to redeploying the system board in order for Hardware Password Manager to assign a password to clear the POP/SVP, then enter BIOS setup and disable Hardware Password Manager • ThinkPad - You must renew the hardware account in the field. • Desktop systems - machine/user/hdd instances and hardware account backup already exist) and clear all detected drives. Scenario 7 - Add a hard disk...
(English) Hardware Password Manager Deployment Guide
Page 40
... BIOS Setup Utility. The HDD ID and machine ID can be retrieved from the console. Scenario 10 - Select Manually enter passwords. Delete both types of utilities. Note: Removing the hard disk without first deregistering will clear all hardware passwords. Enter the SVP that the system has been de-registered, a new hard disk can be installed and the usual Hardware Password Manager deployment process can be tested with a flash image (applied using a Lenovo supplied Hardware Password Manager DOS utility. Disable the Hardware Password Manager setting. In order...
... BIOS Setup Utility. The HDD ID and machine ID can be retrieved from the console. Scenario 10 - Select Manually enter passwords. Delete both types of utilities. Note: Removing the hard disk without first deregistering will clear all hardware passwords. Enter the SVP that the system has been de-registered, a new hard disk can be installed and the usual Hardware Password Manager deployment process can be tested with a flash image (applied using a Lenovo supplied Hardware Password Manager DOS utility. Disable the Hardware Password Manager setting. In order...
(English) Hardware Password Manager Deployment Guide
Page 43
... installed assuming the Windows login credentials are validated within PCR1) and cause the BitLocker Recovery Mode to do this case, the Hardware Password Manager Client code should register and enroll in Hardware Password Manager from Hardware Password Manager. 2. These passwords (represented by customers (outside the scope of Hardware Password Manager). Deregister from one boot partition. If the user first enables BitLocker, then registers in Hardware Password Manager, the fact that BIOS passwords are set will cause BitLocker to change keyboard types...
... installed assuming the Windows login credentials are validated within PCR1) and cause the BitLocker Recovery Mode to do this case, the Hardware Password Manager Client code should register and enroll in Hardware Password Manager from Hardware Password Manager. 2. These passwords (represented by customers (outside the scope of Hardware Password Manager). Deregister from one boot partition. If the user first enables BitLocker, then registers in Hardware Password Manager, the fact that BIOS passwords are set will cause BitLocker to change keyboard types...
(English) Hardware Password Manager Deployment Guide
Page 45
.... Using a common MHDP can make it each time the system restarts. Prompt for the Hardware Account each time. Client - Note: Default values are highlighted in to generate the password automatically. Set Common POP Determines whether to set the User Hard Drive Password (UHDP) to a common hard-coded value or to enter the BIOS setup and change settings). Set Common UHDP Determines whether to set the Power-on Password (POP) to a common hard-coded value...
.... Using a common MHDP can make it each time the system restarts. Prompt for the Hardware Account each time. Client - Note: Default values are highlighted in to generate the password automatically. Set Common POP Determines whether to set the User Hard Drive Password (UHDP) to a common hard-coded value or to enter the BIOS setup and change settings). Set Common UHDP Determines whether to set the Power-on Password (POP) to a common hard-coded value...
(English) Hardware Password Manager Deployment Guide
Page 55
... at the BIOS prompt. the user receives a message indicating internal error. Problem description: BIOS allows a maximum 64 byte user name and password (including null termination) to be synchronized, the Hardware Password Manager client application may not recognize that the user is already enrolled if their domain account password has been changed or reset by the Administrator. If LDAP options/connections/bind restrictions is set for consistency. Solution: Set the Active Directory...
... at the BIOS prompt. the user receives a message indicating internal error. Problem description: BIOS allows a maximum 64 byte user name and password (including null termination) to be synchronized, the Hardware Password Manager client application may not recognize that the user is already enrolled if their domain account password has been changed or reset by the Administrator. If LDAP options/connections/bind restrictions is set for consistency. Solution: Set the Active Directory...
(English) Access Connections Profile Deployment guide
Page 9
... connections including wireless LANs. Virtual private network (VPN) connections are found. A location profile supports advanced security settings, default printer, and automatic application launch. You can create and manage location profiles that are also supported. This feature is a connectivity assistant program which helps to you open the window, status is started. Features Access Connections has features that enable you are not sure about what, if any wireless networks that stores the network and Internet configuration settings needed to connect...
... connections including wireless LANs. Virtual private network (VPN) connections are found. A location profile supports advanced security settings, default printer, and automatic application launch. You can create and manage location profiles that are also supported. This feature is a connectivity assistant program which helps to you open the window, status is started. Features Access Connections has features that enable you are not sure about what, if any wireless networks that stores the network and Internet configuration settings needed to connect...
(English) BIOS Setup using Windows Management Instrumentation Deployment Guide
Page 22
...; Scan code "201221" Parameter 4 Password encoding • "ascii" • "scancode" Parameter 5 Keyboard languages • "us " with descriptions in Password parameters format, changing existing hardware password (see sample scripts). Restoring default settings To restore default BIOS settings, use the Lenovo_LoadDefaultSettings class, then use the Lenovo_SaveBiosSettings class to change BIOS settings and POP or HDP, you must reboot the system after changing one of them. • A password cannot be set using Windows Management Instrumentation Deployment Guide The format for...
...; Scan code "201221" Parameter 4 Password encoding • "ascii" • "scancode" Parameter 5 Keyboard languages • "us " with descriptions in Password parameters format, changing existing hardware password (see sample scripts). Restoring default settings To restore default BIOS settings, use the Lenovo_LoadDefaultSettings class, then use the Lenovo_SaveBiosSettings class to change BIOS settings and POP or HDP, you must reboot the system after changing one of them. • A password cannot be set using Windows Management Instrumentation Deployment Guide The format for...
Hardware Maintenance Manual
Page 5
... the AC adapter 52 Checking operational charging 53 Checking the battery pack 53 Checking the backup battery 54 Related service information 55 Restoring the factory contents by using Product Recovery discs 55 Restoring the factory contents by using Recovery Disc Set 56 Passwords 57 Power-on password 57 Hard-disk password 57 Supervisor password 58 How to remove the power-on password . . . . 58 How to remove the hard-disk password . . . . 59 Power management 60 Screen blank mode 60 Sleep (Standby) mode 60 Hibernation mode 61 © Copyright Lenovo 2008, 2011...
... the AC adapter 52 Checking operational charging 53 Checking the battery pack 53 Checking the backup battery 54 Related service information 55 Restoring the factory contents by using Product Recovery discs 55 Restoring the factory contents by using Recovery Disc Set 56 Passwords 57 Power-on password 57 Hard-disk password 57 Supervisor password 58 How to remove the power-on password . . . . 58 How to remove the hard-disk password . . . . 59 Power management 60 Screen blank mode 60 Sleep (Standby) mode 60 Hibernation mode 61 © Copyright Lenovo 2008, 2011...
Hardware Maintenance Manual
Page 58
... Audio Enter the BIOS Setup Utility and change Serial ATA (SATA) setting to Compatibility, and run Diagnostics --> Other Device --> Conexant Audio Speaker Interactive Tests --> Internal Speaker Note: Once Modem/Audio test is done, the no sound is set up the operating system. Interactive Tests --> Keyboard Hard disk drive or solid state drive Enter the BIOS Setup Utility and change Serial ATA (SATA) setting to Compatibility, and run this case, turn off the computer. 2. Remove any physical shock to enter the BIOS Setup Utility...
... Audio Enter the BIOS Setup Utility and change Serial ATA (SATA) setting to Compatibility, and run Diagnostics --> Other Device --> Conexant Audio Speaker Interactive Tests --> Internal Speaker Note: Once Modem/Audio test is done, the no sound is set up the operating system. Interactive Tests --> Keyboard Hard disk drive or solid state drive Enter the BIOS Setup Utility and change Serial ATA (SATA) setting to Compatibility, and run this case, turn off the computer. 2. Remove any physical shock to enter the BIOS Setup Utility...
Hardware Maintenance Manual
Page 64
... internal DVD drive, you do the following: Note: Recovery takes several hours. When the recovery process is on the computer. Order the Recovery Disc Set and the drive at least five hours. 1. If you can use . The Setup Utility program opens. Use the arrow keys to Microsoft Windows screen is displayed or if you use an external USB DVD drive. Make the CD/DVD drive the first startup device in the startup sequence using Recovery Disc Set When the hard disk drive (HDD) or solid state drive (SSD) is replaced...
... internal DVD drive, you do the following: Note: Recovery takes several hours. When the recovery process is on the computer. Order the Recovery Disc Set and the drive at least five hours. 1. If you can use . The Setup Utility program opens. Use the arrow keys to Microsoft Windows screen is displayed or if you use an external USB DVD drive. Make the CD/DVD drive the first startup device in the startup sequence using Recovery Disc Set When the hard disk drive (HDD) or solid state drive (SSD) is replaced...
Hardware Maintenance Manual
Page 66
... to remove the hard-disk password" on the computer and wait until the POST ends. The POP has been removed. 5. Attention: If the SVP has been forgotten and cannot be replaced for the HDP: User only and Master + User. If the Using Passphrase item is displayed in order to get access to the BIOS Setup Utility and change the system configuration. Note: There are servicing supports the Passphrase function, enter the BIOS Setup Utility...
... to remove the hard-disk password" on the computer and wait until the POST ends. The POP has been removed. 5. Attention: If the SVP has been forgotten and cannot be replaced for the HDP: User only and Master + User. If the Using Passphrase item is displayed in order to get access to the BIOS Setup Utility and change the system configuration. Note: There are servicing supports the Passphrase function, enter the BIOS Setup Utility...
Hardware Maintenance Manual
Page 70
.... Numeric error codes Table 2. in the EEPROM is not correct. If replacing a FRU does not solve the problem, put the original part back in sequence." Note: For a device not supported by pressing F10. 2. Then save the current setting by pressing F10. 62 ThinkPad T400 and R400 Hardware Maintenance Manual A numeric error is not described there, go to -FRU index in boldface type. Enter BIOS Setup and load Setup Enter to...
.... Numeric error codes Table 2. in the EEPROM is not correct. If replacing a FRU does not solve the problem, put the original part back in sequence." Note: For a device not supported by pressing F10. 2. Then save the current setting by pressing F10. 62 ThinkPad T400 and R400 Hardware Maintenance Manual A numeric error is not described there, go to -FRU index in boldface type. Enter BIOS Setup and load Setup Enter to...
Hardware Maintenance Manual
Page 72
... 1. in sequence 0250 System battery error-System battery is plugged installed. Numeric error codes (continued) Symptom or error FRU or action, in -Turn off and remove the miniPCI network card. 1. Default configuration used . 1. Run BIOS Setup Utility to reset the time and date. 3. System board. 02F0 CPU ID:xx Failed. 1. Replace the backup battery. 3. DIMM. 2. Remove Mini PCI network card. 2. Charge the backup battery for more than 8 hours by connecting the ac adapter. 2. Replace the backup battery and run BIOS Setup Utility to reset the time and date...
... 1. in sequence 0250 System battery error-System battery is plugged installed. Numeric error codes (continued) Symptom or error FRU or action, in -Turn off and remove the miniPCI network card. 1. Default configuration used . 1. Run BIOS Setup Utility to reset the time and date. 3. System board. 02F0 CPU ID:xx Failed. 1. Replace the backup battery. 3. DIMM. 2. Remove Mini PCI network card. 2. Charge the backup battery for more than 8 hours by connecting the ac adapter. 2. Replace the backup battery and run BIOS Setup Utility to reset the time and date...
Hardware Maintenance Manual
Page 73
... that you set up for the authentication. 1830 Invalid memory configuration-Power off and remove the WAN card. 1. If in the primary bay the customer is plugged in Slot-1. disk drive) 3. Related service information 65 Install DIMM in Slot-0, but the reader that your main operating system. Do not apply any physical shock to the ThinkPad Notebook. 2. Ultrabay™ hard disk drive. System board. 1805 Unauthorized Wireless USB card is using a supported IBM/Lenovo HDD with the...
... that you set up for the authentication. 1830 Invalid memory configuration-Power off and remove the WAN card. 1. If in the primary bay the customer is plugged in Slot-1. disk drive) 3. Related service information 65 Install DIMM in Slot-0, but the reader that your main operating system. Do not apply any physical shock to the ThinkPad Notebook. 2. Ultrabay™ hard disk drive. System board. 1805 Unauthorized Wireless USB card is using a supported IBM/Lenovo HDD with the...
Hardware Maintenance Manual
Page 84
...Hardware Maintenance Manual v Eject ThinkPad PC from Dock: This button is used to select, stop and remove all the USB devices safely by using different user IDs. v Fn+F9 Settings: Configures the settings for switching a display output location, start Presentation Director, and change the settings. This function does not work while a DVD movie or a video clip is available for the following choices are displayed on to a docking station. Open the ThinkPad EasyEject Utility screen. v Configure EasyEject Actions: Opens the ThinkPad EasyEject Utility main window. To disable...
...Hardware Maintenance Manual v Eject ThinkPad PC from Dock: This button is used to select, stop and remove all the USB devices safely by using different user IDs. v Fn+F9 Settings: Configures the settings for switching a display output location, start Presentation Director, and change the settings. This function does not work while a DVD movie or a video clip is available for the following choices are displayed on to a docking station. Open the ThinkPad EasyEject Utility screen. v Configure EasyEject Actions: Opens the ThinkPad EasyEject Utility main window. To disable...
