Certificate-Based Bios Management - Lenovo ThinkCentre M70q Gen 4 User Manual

When a supervisor password is set, you are prompted to enter a valid password each time you try to enter
the BIOS menu.
If both the power-on password and supervisor password are set, you can enter either password.
However, you must use your supervisor password to change any configuration settings.
• Hard disk password
Setting a hard disk password prevents unauthorized access to the data on the storage drive. When a hard
disk password is set, you are prompted to enter a valid password each time you try to access the storage
drive.
Note: After you set a hard disk password, your data on the storage drive is protected even if the storage
drive is removed from one computer and installed in another.
• System management password (for selected models)
You can enable the system management password to have the same authority as the supervisor
password to control security related features. To customize the authority of the system management
password through the UEFI BIOS menu:
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1.
2. Select Security ➙ System Management Password Access Control.
3. Follow the on-screen instructions.
If you have set both the supervisor password and the system management password, the supervisor
password overrides the system management password.
Set, change, and remove a password
Before you start, print these instructions.
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1.
2. Select Security.
3. Depending on the password type, select Set Supervisor Password, Set Power-On Password, Set
System Management Password, or Hard Disk Password and press Enter.
4. Follow the on-screen instructions to set, change, or remove a password.
5. Press F10 or Fn+F10 to save the changes and exit.
You should record your passwords and store them in a safe place. If you forget the passwords, contact a
Lenovo-authorized service provider to have the passwords removed.
Note: If the hard disk password is forgotten, Lenovo cannot remove the password or recover data from the
storage drive.

Certificate-based BIOS management

Certificate-based BIOS authentication (also called the password-less management mode) provides more
secure UEFI BIOS management with password-free solution. It is used to replace the supervisor password /
system management password for authentication if you have set one.
Note: Supervisor password / system management password are disabled automatically when certificate
mode is enabled. But the power-on password / hard disk password still can be used normally in certificate
mode if you have set one.
For certificate enrollment, see Certificate Enrollment Guide at:
enrollment_guide
14
M70q Gen 4 / M80q Gen 4 / M90q Gen 4 User Guide
https://support.lenovo.com/docs/certificate_