Certificate Based Bios Management - Lenovo ThinkPad P16s Gen 1 User Manual

Certificate based BIOS management

Certificate-based BIOS authentication (also called the password-less management mode) provides more
secure UEFI BIOS management with password-free solution. It is used to replace the supervisor password /
system management password for authentication if you have set one.
Note: Supervisor password / system management password are disabled automatically when certificate
mode is enabled. But the power-on password / hard disk password / NVMe password still can be used
normally in certificate mode if you have set one.
For certificate enrollment, see Certificate Enrollment Guide at:
enrollment_guide
Enter the BIOS menu with certificate
Once you have enrolled the certificate, you can enter the BIOS menu with the certificate.
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1 to enter the BIOS menu.
2. The request data is displayed. Click Save to File to save the request data in a USB key and send the
request data to IT admin by e-mail or phone.
3. Enter the unlock code provided by IT admin and click OK.
Notes:
• The unlock encode is a one-time password and is valid only during logon prompt (in one power-on cycle)
for up to two hours.
• If you click Skip, you can enter the BIOS setup menu without BIOS management authority. But certificate
reset is allowed.
Reset certificate
The enrolled certificate cannot be disabled. You can reset or remove it:
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1.
2. Enter the BIOS menu with the certificate or skip the certification authentication process.
3. Select Security ➙ Reset Certificate.
4. Follow the on-screen instructions to enter the reset code provided by IT admin.
40
T14 Gen 3/P14s Gen 3/T16 Gen 1/P16s Gen 1 User Guide
https://support.lenovo.com/docs/certificate_