Table of Contents
Advertisement
• Move SE455 V3 system to a safe working place for service.
• Place SE455 V3 system back to the working place after service.
Activate or unlock the system
Being shipped, encountering tamper events, or receiving lockdown command from Lenovo management
software, the server would be in System Lockdown Mode for security. Before operation, the server needs to
be activated or unlocked to be able to boot up and go fully functional. Complete the steps in this topic to
activate or unlock the system.
If the security LED of the server is blinking, the server is in System Lockdown Mode. Activate or unlock the
system for operation. See
System Lockdown Mode Control
To distinguish whether the system needs to be activated or unlocked, see System Lockdown Control
status on the home page of Lenovo XClarity Controller web interface. System Lockdown Control status
would be one of the following:
• ThinkShield Portal: The system can be activated through ThinkShield Key Vault Portal. See
system" on page 255
• XClarity Controller: The system can be unlocked through Lenovo XClarity Controller. See
system" on page 256
Important:
• When System Lockdown Control status is XClarity Controller, if XClarity Controller is reset to defaults, the
default credentials can be used to login to XClarity Controller and unlock the system. It is important to use
security controls such as an UEFI PAP to prevent unauthorized users from executing an XClarity
Controller reset to defaults. For the highest level of security, it is recommended to set System Lockdown
Control to ThinkShield Portal.
• Once the System Lockdown Control status is changed to ThinkShield Portal, it cannot be changed back
to XClarity Controller.
• To set System Lockdown Control to ThinkShield Portal, use Lenovo XClarity Essentials UpdateXpress.
Activate the system
Complete the following steps to activate the system through ThinkShield Key Vault Portal.
Have a Lenovo ID with proper permission
Before activating a system for the first time, make sure to have a Lenovo ID with proper permission to log in
to the ThinkShield Key Vault Portal web interface or ThinkShield mobile app.
Note: The role of Lenovo ID should be Organization Admin, Maintenance User or Edge User to activate
the system.
• For Lenovo ID setup, see
• To log in to the Lenovo ThinkShield Key Vault Portal, see
Activation methods
There are different methods to active the system through ThinkShield Key Vault Portal. Depending on the
environment of the server, decide the most suitable way to activate the system.
• Mobile App activation
For Mobile App activation method, you will need an Android or iOS based smart phone with cellular data
connection.
"Front LEDs" on page 271
to activate the system.
to unlock the system.
https://passport.lenovo.com
to locate the security LED.
.
https://portal.thinkshield.lenovo.com
Chapter 7
"Activate the
"Unlock the
.
.
System configuration
255
Advertisement
Table of Contents
Troubleshooting
