Certificate Based Bios Management - Lenovo 30FM002VUS User Manual

Setting a hard disk password prevents unauthorized access to the data on the storage drive. When a hard
disk password is set, you are prompted to enter a valid password each time you try to access the storage
drive.
Note: After you set a hard disk password, your data on the storage drive is protected even if the storage
drive is removed from one computer and installed in another.
• System management password (for selected models)
You can enable the system management password to have the same authority as the supervisor
password to control security related features. To customize the authority of the system management
password through the UEFI BIOS menu:
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1.
2. Select Security ➙ System Management Password Access Control.
3. Follow the on-screen instructions.
If you have set both the supervisor password and the system management password, the supervisor
password overrides the system management password.
Set, change, and remove a password
Before you start, print these instructions.
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1.
2. Select Security.
3. Depending on the password type, select Set Supervisor Password, Set Power-On Password, Set
System Management Password, or Hard Disk Password and press Enter.
4. Follow the on-screen instructions to set, change, or remove a password.
5. Press F10 or Fn+F10 to save the changes and exit.
You should record your passwords and store them in a safe place. If you forget the passwords, contact a
Lenovo-authorized service provider to have the passwords removed.
Note: If the hard disk password is forgotten, Lenovo cannot remove the password or recover data from the
storage drive.

Certificate based BIOS management

Certificate-based BIOS authentication (also called the password-less management mode) provides more
secure UEFI BIOS management with password-free solution. It is used to replace the supervisor password /
system management password for authentication if you have set one.
Note: Supervisor password / system management password are disabled automatically when certificate
mode is enabled. But the power-on password / hard disk password still can be used normally in certificate
mode if you have set one.
For certificate enrollment, see Certificate Enrollment Guide at:
enrollment_guide
Enter the BIOS menu with certificate
Once you have enrolled the certificate, you can enter the BIOS menu with the certificate.
1. Restart the computer. When the logo screen is displayed, press F1 or Fn+F1 to enter the BIOS menu.
2. The request data is displayed. Click Save to File to save the request data in a USB key and send the
request data to IT admin by e-mail or phone.
3. Enter the unlock code provided by IT admin and click OK.
https://support.lenovo.com/docs/certificate_
.
Chapter 4 Secure your computer and information
17