Certificate-Based Bios Management; What Is Uefi Bios - Lenovo ThinkCentre M70s Gen 4 User Manual

You should record your passwords and store them in a safe place. If you forget the passwords, contact a
Lenovo-authorized service provider to have the passwords removed.
Note: If the hard disk password is forgotten, Lenovo cannot remove the password or recover data from the
storage drive.

Certificate-based BIOS management

Certificate-based BIOS authentication (also called the password-less management mode) provides more
secure UEFI BIOS management with password-free solution. It is used to replace the supervisor password /
system management password for authentication if you have set one.
Note: Supervisor password / system management password are disabled automatically when certificate
mode is enabled. But the power-on password / hard disk password still can be used normally in certificate
mode if you have set one.
For certificate enrollment, see Certificate Enrollment Guide at:
enrollment_guide
Enter the BIOS menu with certificate
Once you have enrolled the certificate, you can enter the BIOS menu with the certificate.
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1 to enter the BIOS menu.
2. The QR code is displayed. Scan the QR code to save the request data and send the request data to IT
admin by e-mail or phone.
Note: If you choose to authenticate without the QR code, save the request data in a USB key and send
the request data to IT admin by e-mail or phone.
3. Enter the unlock code provided by IT admin and click OK.
Notes:
• The unlock encode is a one-time password and is valid only during logon prompt (in one power-on cycle)
for up to two hours.
• If you click Skip, you can enter the BIOS setup menu without BIOS management authority. But certificate
reset is allowed.
Reset certificate
The enrolled certificate cannot be disabled. You can reset or remove it:
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1.
2. Enter the BIOS menu with the certificate or skip the certification authentication process.
3. Select Security ➙ Certificate-based BIOS Authentication ➙ Reset Certificate.
4. Follow the on-screen instructions to enter the reset code provided by IT admin.

What is UEFI BIOS

Note: The operating system settings might override any similar settings in UEFI BIOS.
UEFI BIOS is the first program that the computer runs when the computer is turned on. UEFI BIOS initializes
the hardware components and loads the operating system and other programs. Your computer comes with a
setup program with which you can change UEFI BIOS settings.
18
ThinkCentre M70s Gen 4 ThinkCentre M90s Gen 4 User Guide
https://support.lenovo.com/docs/certificate_