Hard Disk Security - ThinkPad Helix 20CG User Manual

Tips on using the hard disk passwords
• You can set the minimum length of a hard disk password through the Security menu.
• If you set a hard disk password of over seven characters, the hard disk drive can be used only with a
tablet that can recognize a hard disk password of over seven characters. If you then install the hard disk
drive in a tablet that cannot recognize a hard disk password that contains more than seven characters,
you cannot access the drive.
• Record your password and store it in a safe place. If you forget the user hard disk password, or both user
and master hard disk passwords, Lenovo cannot reset your passwords or recover data from the hard disk
drive. You must take your tablet to a Lenovo reseller or a marketing representative to have the hard disk
drive replaced. Proof of purchase is required, and a fee will be charged for parts and service.
Notes: The eDrive storage drives or Trusted Computing Group (TCG) Opal-compliant storage drives provide
self-encryption capabilities to secure your data.
• If a TCG Opal-compliant storage drive and a TCG Opal management software program are installed, and
the TCG Opal management software program is activated, the hard disk password is not available.
• If an eDrive storage drive is installed in your tablet, and your tablet is preinstalled with the Windows 8.1
operating system, the hard disk password is not available.

Hard disk security

To protect passwords from unauthorized security attacks, refer to the following tips to maximize security:
• Set a power-on password as well as a hard disk password for your internal solid-state drive. Refer to the
procedures in "Power-on password" on page 69 and "Hard disk passwords" on page 71. For security,
a longer password is recommended.
• To provide reliable security for the UEFI BIOS, use the security chip and a security application with a
Trusted Platform Module management feature. Refer to "Using the security chip" on page 74.
• If an Encryption solid-state drive is installed in your tablet, be sure to protect the contents of your tablet
memory from unauthorized access by use of drive encryption software, such as Microsoft Windows
®
BitLocker Drive Encryption, which is supported in the Professional and Enterprise editions of the
Windows 8.1 operating system. Refer to "Using Windows BitLocker Drive Encryption" on page 73.
• Before you dispose of, sell, or hand over your tablet, delete the data stored on it.
Using Windows BitLocker Drive Encryption
To help protect your tablet against unauthorized access, use the drive encryption software, such as
Windows BitLocker Drive Encryption.
Windows BitLocker Drive Encryption is an integral security feature of Windows 8.1 operating system. It is
supported in the Professional and Enterprise editions of the Windows 8.1 operating system. It can help you
protect the operating system and data stored on your tablet, even if your tablet is lost or stolen. BitLocker
works by encrypting all user and system files, including the swap and hibernation files.
BitLocker uses a Trusted Platform Module to provide enhanced protection for your data and to ensure early
boot component integrity. A compatible TPM is defined as a V1.2 TPM.
To check the BitLocker status, go to Control Panel, and click System and Security ➙ BitLocker Drive
Encryption.
For more information about Windows BitLocker Drive Encryption, see the help information system of the
Windows operating system, or search for "Microsoft Windows BitLocker Drive Encryption Step-by-Step
Guide" on the Microsoft Web site.
73
.
Chapter 6 Security