•Setapower-onpasswordaswellasaharddiskpassword.Forsecurity,alongerpasswordis
recommended.
•TheM.2solid-statedrivebuiltintoyourcomputercanbeprotectedbyUEFIBIOS.Toprovidereliable
security,usethesecuritychipandasecurityprogramwiththeTrustedPlatformModule(TPM)
managementfeature.See“Settingthesecuritychip”onpage53
.
•IfaDiskEncryptionstoragedriveisinstalledinyourcomputer,ensuretoprotectthecontentsofyour
computerfromunauthorizedaccessbyuseofdriveencryptionsoftware,suchasMicrosoftWindows
BitLocker
®
DriveEncryption.
•Beforeyoudisposeof,sell,orhandoveryourcomputer,deletethedatastoredonit.Formoreinformation,
see“Deletingdatafromyourstoragedrive”onpage56
.
UsingWindowsBitLockerDriveEncryption
Tohelpprotectyourcomputeragainstunauthorizedaccess,usethedriveencryptionsoftware,suchas
WindowsBitLockerDriveEncryption.
WindowsBitLockerDriveEncryption(referredtoasBitLocker)isanintegralsecurityfeatureofsomeeditions
oftheWindowsoperatingsystem.Itcanhelpyouprotecttheoperatingsystemanddatastoredonyour
computer,evenifyourcomputerislostorstolen.BitLockercanencryptalluserandsystemfiles,including
theswapandhibernationfiles.
BitLockerusestheTPMtoprovideenhancedprotectionforyourdataandtoensureearlybootcomponent
integrity.AcompatibleTPMisdefinedasaV2.0TPM.
TochecktheBitLockerstatus,gotoControlPanel,viewControlPanelbyCategory,andclickSystemand
Security➙BitLockerDriveEncryption.
Formoreinformation,seethehelpsystemoftheWindowsoperatingsystem,orsearchfor“Microsoft
WindowsBitLockerDriveEncryptionStep-by-StepGuide”ontheMicrosoftWebsite.
DiskEncryptionsolid-statedrive
SomemodelsmightcontaintheDiskEncryptionsolid-statedrive.Thisencryptiontechnologyhelpsto
protectyourcomputeragainstsecurityattacksonmedia,NANDflash,ordevicecontrollersbyuseofa
hardwareencryptionchip.Fortheefficientuseoftheencryptionfeature,setaharddiskpasswordforthe
internalstoragedrive.
Settingthesecuritychip
Strictsecurityrequirementsareimposedonnetworkclientcomputersthattransferconfidentialinformation
electronically.Dependingontheoptionsyouordered,yourcomputermighthaveanembeddedsecuritychip
(acryptographicmicroprocessor).Withthesecuritychip,youcandothefollowing:
•Protectyourdataandsystem
•Strengthenaccesscontrols
•Securecommunications
Beforeyoustart,printtheseinstructions.
TosetanitemontheSecurityChipsubmenu,dothefollowing:
1.Restartthecomputer.Whenthelogoscreenisdisplayed,pressF1tostarttheThinkPadSetupprogram.
2.SelectSecurity➙SecurityChipbyusingthedirectionalkeys.
3.PressEnter.TheSecurityChipsubmenuopens.
Chapter5.Security53