Setting The Security Chip; Using Windows Bitlocker Drive Encryption; Encryption Solid-State Drive - Lenovo ThinkPad P40 Yoga User Manual

• If a Disk Encryption hard disk drive, an Encryption solid-state drive, or a Disk Encryption hybrid drive is
installed in your computer, be sure to protect the contents of your computer memory from unauthorized
access by use of drive encryption software, such as Microsoft Windows BitLocker
Refer to "Using Windows BitLocker Drive Encryption" on page 60.
• Before you dispose of, sell, or hand over your computer, be sure to delete data stored on it. For more
information, refer to "Notice on deleting data from your storage drive" on page 64.
Note: The hard disk drive or hybrid drive built into your computer can be protected by UEFI BIOS.

Using Windows BitLocker Drive Encryption

To help protect your computer against unauthorized access, be sure to use drive encryption software, such
as Windows BitLocker Drive Encryption.
Windows BitLocker Drive Encryption is an integral security feature of some editions of the Windows
operating system. It can help you protect the operating system and data stored on your computer, even
if your computer is lost or stolen. BitLocker works by encrypting all user and system files, including the
swap and hibernation files.
BitLocker uses a Trusted Platform Module to provide enhanced protection for your data and to ensure early
boot component integrity. A compatible TPM is defined as a V1.2 TPM.
To check the BitLocker status, go to Control Panel, and click System and Security ➙ BitLocker Drive
Encryption.
For more information about Windows BitLocker Drive Encryption, see the help information system of the
Windows operating system, or search for "Microsoft Windows BitLocker Drive Encryption Step-by-Step
Guide" on the Microsoft Web site.
Disk Encryption hard disk drive, Encryption solid-state drive, and Disk Encryption hybrid drive
Some models contain the Disk Encryption hard disk drive, the Encryption solid-state drive, or the Disk
Encryption hybrid drive. This feature helps to protect your computer against security attacks on media,
NAND flash or device controllers by use of a hardware encryption chip. For the efficient use of the encryption
feature, be sure to set a hard disk password for the internal storage device.

Setting the security chip

Strict security requirements are imposed on network client computers that transfer confidential information
electronically. Depending on the options you ordered, your computer might have an embedded security
chip, a cryptographic microprocessor. With the security chip, you can do the following:
• Protect your data and system
• Strengthen access controls
• Secure communications

Setting the security chip

The choices offered on the Security Chip submenu under the Security menu of ThinkPad Setup are as
follows:
• Security Chip: Activate, inactivate, or disable the security chip.
• Security Reporting Options: Enable or disable each security reporting option.
• Clear Security Chip: Clear the encryption key.
Before you start, print these instructions.
60
ThinkPad P40 Yoga, ThinkPad S3, ThinkPad Yoga 14, and ThinkPad Yoga 460 User Guide
®
Drive Encryption.