Hard Disk Security; Setting The Security Chip - Lenovo ThinkPad 11e 3rd Gen User Manual

• Record your password and store it in a safe place. If you forget the user hard disk password, or both
user and master hard disk passwords, Lenovo cannot reset your passwords or recover data from the
internal storage drive. You must take your computer to a Lenovo reseller or a marketing representative
to have the internal storage drive replaced. Proof of purchase is required, and a fee will be charged
for parts and service.

Hard disk security

To protect passwords from unauthorized security attacks, refer to the following tips to maximize security:
• Set a power-on password as well as a hard disk password for your internal storage drive. Refer to the
procedures in "Power-on password" on page 48 and "Hard disk passwords" on page 50. For security,
a longer password is recommended.
• Use the security chip to provide reliable security for the UEFI BIOS. Refer to "Setting the security chip"
on page 52.
• If a Disk Encryption storage drive is installed in your computer, be sure to protect the contents of your
computer memory from unauthorized access by use of drive encryption software, such as Microsoft
®
Windows BitLocker
• Before you dispose of, sell, or hand over your computer, be sure to delete data stored on it. For more
information, refer to "Notice on deleting data from your M.2 solid-state drive" on page 53.
Note: The internal storage drive built into your computer can be protected by UEFI BIOS.
Using Windows BitLocker Drive Encryption
To help protect your computer against unauthorized access, use the drive encryption software, such as
Windows BitLocker Drive Encryption.
Windows BitLocker Drive Encryption is an integral security feature of some editions of the Windows
operating system. It can help you protect the operating system and data stored on your computer, even
if your computer is lost or stolen. BitLocker works by encrypting all user and system files, including the
swap and hibernation files.
BitLocker provides enhanced protection for your data and to ensure early boot component integrity.
To check the BitLocker status, go to Control Panel, and click System and Security ➙ BitLocker Drive
Encryption.
For more information about Windows BitLocker Drive Encryption, see the help information system of the
Windows operating system, or search for "Microsoft Windows BitLocker Drive Encryption Step-by-Step
Guide" on the Microsoft Web site.
Encryption solid-state drive
Some models contain the Encryption solid-state drive. This feature helps to protect your computer against
security attacks on media, NAND flash or device controllers by use of a hardware encryption chip. For the
efficient use of the encryption feature, be sure to set a hard disk password for the internal storage device.

Setting the security chip

Strict security requirements are imposed on network client computers that transfer confidential information
electronically. Depending on the options you ordered, your computer might have an embedded security
chip, a cryptographic microprocessor. With the security chip, you can do the following:
• Protect your data and system
52
ThinkPad 11e 3rd Gen and ThinkPad Yoga 11e 3rd Gen User Guide
Drive Encryption. Refer to "Using Windows BitLocker Drive Encryption" on page 52.