Hard Disk Security; Setting The Security Chip - Lenovo ThinkPad X1 User Manual

Hard disk security

Your computer supports an enhanced security solution for solid state drive or hard disk drive. To protect
passwords from unauthorized security attacks, several of the latest technologies and algorithms are
integrated into UEFI BIOS and hardware design of ThinkPad notebooks.
To maximize security, do the following:
1. Set a power-on password as well as a hard disk password for your internal solid state drive or hard disk
drive. Refer to the procedures in "Power-on password" on page 56 and "Hard disk passwords" on page
57. For security, a longer password is recommended.
2. To provide reliable security for UEFI BIOS, use the security chip and a security application with a Trusted
Platform Module management feature. Refer to "Setting the security chip" on page 61.
3. If a Disk Encryption hard disk drive or an Encryption solid state drive is installed in your computer,
be sure to protect the contents of your computer memory from unauthorized access by use of drive
encryption software, such as Microsoft Windows BitLocker
"Using Windows BitLocker Drive Encryption" on page 61.
4. Before you dispose of, sell, or hand over your computer, make sure to delete data stored on it. Refer to
"Notice on deleting data from your hard disk drive or solid state drive" on page 66.
Note: The hard disk drive built into your computer can be protected by UEFI BIOS.
Using Windows BitLocker Drive Encryption
To help protect your computer from being subject to unauthorized access, be sure to use drive encryption
software, such as Windows BitLocker Drive Encryption.
Windows BitLocker Drive Encryption is an integral security feature of Windows 7. It is supported in Ultimate
and Enterprise editions of Windows 7. It can help you protect the operating system and data stored in your
computer data, even if your computer is lost or stolen. BitLocker works by encrypting all user and system
files, including the swap and hibernation files.
BitLocker uses a Trusted Platform Module to provide enhanced protection for your data and to ensure early
boot component integrity. A compatible TPM is defined as a V1.2 TPM.
To check the BitLocker status, click Start ➙ Control Panel ➙ System and Security ➙ BitLocker Drive
Encryption.
For details about Windows BitLocker Drive Encryption, go to the Help and Support for Windows 7, or search
for "Microsoft Windows BitLocker Drive Encryption Step-by-Step Guide" on the Microsoft web site.
Disk Encryption hard disk drive and Encryption solid state drive
Some models contain the Disk Encryption hard disk drive or Encryption solid state drive. This feature
helps to protect your computer against security attacks on media, NAND flash or device controllers by use
of a hardware encryption chip. For the efficient use of the encryption feature, be sure to set a hard disk
password for the internal storage device.

Setting the security chip

Strict security requirements are imposed on network client computers that transfer confidential information
electronically. Depending on the options you ordered, your computer might have an embedded security chip,
a cryptographic microprocessor. With the security chip and Client Security Solution, you can do the following:
• Protect your data and system
®
Drive Encryption in Windows 7. Refer to
Chapter 4
61
.
Security