Setting The Security Chip - Lenovo 20EQS1LG00 User Manual

• To provide reliable security for the UEFI BIOS, use the security chip and a security application with a
Trusted Platform Module management feature. Refer to "Setting the security chip" on page 58.
• If a Disk Encryption storage device is installed in your computer, be sure to protect the contents of your
computer memory from unauthorized accesses by use of drive encryption software, such as Microsoft
®
Windows BitLocker
• Before you dispose of, sell, or hand over your computer, delete data stored on it. For more information,
refer to "Notice on deleting data from your internal storage device" on page 62.
The storage device built into your computer can be protected by the UEFI BIOS.
Using Windows BitLocker Drive Encryption
To help protect your computer against unauthorized access, use the drive encryption software, such as
Windows BitLocker Drive Encryption.
Windows BitLocker Drive Encryption is an integral security feature of some editions of the Windows
operating system. It can help you protect the operating system and data stored on your computer, even
if your computer is lost or stolen. BitLocker works by encrypting all user and system files, including the
swap and hibernation files.
BitLocker uses a Trusted Platform Module to provide enhanced protection for your data and to ensure early
boot component integrity. A compatible TPM is defined as a V1.2 TPM.
To check the BitLocker status, go to Control Panel, and click System and Security ➙ BitLocker Drive
Encryption.
For more information about Windows BitLocker Drive Encryption, see the help information system of the
Windows operating system, or search for "Microsoft Windows BitLocker Drive Encryption Step-by-Step
Guide" on the Microsoft Web site.
Disk Encryption storage device
Some models contain the Disk Encryption storage device. This feature helps to protect your computer
against security attacks on media, NAND flash, or device controllers by use of a hardware encryption chip.
For the efficient use of the encryption feature, set a hard disk password for the internal storage device.

Setting the security chip

Strict security requirements are imposed on network client computers that transfer confidential information
electronically. Depending on the options you ordered, your computer might have an embedded security
chip, a cryptographic microprocessor. With the security chip, you can do the following:
• Protect your data and system
• Strengthen access controls
• Secure communications
Before you start, print these instructions.
To set an item on the Security Chip submenu, do the following:
1. Turn off your computer. Wait for about five seconds, and then turn on your computer again.
2. When the logo screen is displayed, press F1 to start the ThinkPad Setup program.
3. Select Security ➙ Security Chip by using the directional keys.
4. Press Enter. The Security Chip submenu opens.
58
ThinkPad P50 User Guide
Drive Encryption. See "Using Windows BitLocker Drive Encryption" on page 58.