Lenovo ThinkPad S2 Gen 8 User Manual page 40

Note: Supervisor password / system management password are disabled automatically when certificate
mode is enabled. But the power-on password / NVMe password still can be used normally in certificate
mode if you have set one.
For certificate enrollment, see Certificate Enrollment Guide at:
enrollment_guide
Enter the BIOS menu with certificate
Once you have enrolled the certificate, you can enter the BIOS menu with the certificate.
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1 to enter the BIOS menu.
2. The QR code is displayed. Scan the QR code to save the request data and send the request data to IT
admin by e-mail or phone.
Note: If you choose to authenticate without the QR code, save the request data in a USB key and send
the request data to IT admin by e-mail or phone.
3. Enter the unlock code provided by IT admin and click OK.
Notes:
• The unlock encode is a one-time password and is valid only during logon prompt (in one power-on cycle)
for up to two hours.
• If you click Skip, you can enter the BIOS setup menu without BIOS management authority. But certificate
reset is allowed.
Reset certificate
The enrolled certificate cannot be disabled. You can reset or remove it:
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1.
2. Enter the BIOS menu with the certificate or skip the certification authentication process.
3. Select Security ➙ Reset Certificate.
4. Follow the on-screen instructions to enter the reset code provided by IT admin.
34
L13 Gen 4, L13 Yoga Gen 4, S2 Gen 8, and S2 Yoga Gen 8 User Guide
https://support.lenovo.com/docs/certificate_