Associate Your Fingerprints With Passwords (For Selected Models); Certificate Based Bios Management - Lenovo ThinkPad X1 Nano Gen 2 User Manual

• If you have set a supervisor password and remember it:
1. Restart the computer. When the logo screen is displayed, immediately press F1.
2. Type the supervisor password to enter the UEFI BIOS menu.
3. Select Security ➙ Password ➙ System Management Password by using the arrow keys.
4. Type the current supervisor password in the Enter Current Password field. Then, leave the Enter
New Password field blank, and press Enter twice.
5. In the Changes have been saved window, press Enter.
6. Press F10 to save changes and exit the UEFI BIOS menu.
• If you have not set a supervisor password, contact a Lenovo authorized service provider to have the
system management password removed.

Associate your fingerprints with passwords (for selected models)

Do the following to associate your fingerprints with the power-on password and NVMe password:
1. Turn off and then turn on the computer.
2. When prompted, scan your finger on the fingerprint reader.
3. Enter your power-on password, NVMe password, or both as required. The association is established.
When you start the computer again, you can use your fingerprints to log in to the computer without entering
your Windows password, power-on password, or NVMe password. To change settings, press F1 to enter the
UEFI BIOS menu, and then select Security ➙ Fingerprint.
Attention: If you always use your fingerprint to log in to the computer, you might forget your passwords.
Write down your passwords, and keep them in a safe place.

Certificate based BIOS management

Certificate-based BIOS authentication (also called the password-less management mode) provides more
secure UEFI BIOS management with password-free solution. It is used to replace the supervisor password /
system management password for authentication if you have set one.
Note: Supervisor password / system management password are disabled automatically when certificate
mode is enabled. But the power-on password / NVMe still can be used normally in certificate mode if you
have set one.
For certificate enrollment, see Certificate Enrollment Guide at:
enrollment_guide
Enter the BIOS menu with certificate
Once you have enrolled the certificate, you can enter the BIOS menu with the certificate.
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1 to enter the BIOS menu.
2. The request data is displayed. Click Save to File to save the request data in a USB key and send the
request data to IT admin by e-mail or phone.
3. Enter the unlock code provided by IT admin and click OK.
Notes:
• The unlock encode is a one-time password and is valid only during logon prompt (in one power-on cycle)
for up to two hours.
• If you click Skip, you can enter the BIOS setup menu without BIOS management authority. But certificate
reset is allowed.
https://support.lenovo.com/docs/certificate_
.
Chapter 4 Secure your computer and information
33