•Toremovetheuserharddiskpassword,typethecurrentmasterharddiskpasswordintheEnterCurrent
Passwordeld.ThenleavetheEnterNewPasswor dandConrmNewPasswordeldsblank,and
pressEnter.ASetupNoticewindowisdisplayed.PressF10toexitfr omtheSetupNoticewindow.Both
theuserandmasterharddiskpasswordswillberemoved.
IfyouchooseMasterHDP,dooneofthefollowing:
•Tochangethemasterharddiskpassword,typethecurrentmasterharddiskpasswordintheEnter
CurrentPasswordeld.ThentypethenewmasterharddiskpasswordintheEnterNewPassword
eld,andretypethepasswordyoujustenteredtoverifyitintheConrmNewPasswor deld.Press
Enter,andaSetupNoticewindowisdisplayed.P ressF10toexitfromtheSetupNoticewindow.The
masterharddiskpasswordwillbechanged.
•Toremovethemasterharddiskpasswor d,typethecurrentmasterharddiskpasswordintheEnter
CurrentPasswordeld.ThenleavetheEnterNewPasswordandConrmNewPasswordeldsblank,
andpressEnter.ASetupNoticewindowisdisplayed.Pr essF10toexitfromtheSetupNoticewindow.
Boththeuserandmasterharddiskpasswordswillberemoved.
Supervisorpassword
Thesupervisorpasswordprotectsthesyst eminformationstoredintheThinkP adSetup.Withoutit,noone
canchangethecongurationofthecomputer.Itprovidesthefollowingsecurityfeatur es:
•Ifasupervisorpasswordisset,apasswordpromptappearswhenyoutrytostarttheThinkPadSetup.
Unauthorizeduserscannotgetaccesstocongurationdata.
•Thesystemadministratorcanusethesupervisorpasswordtogetaccesstoacomputereveniftheuserof
thatcomputerhassetapower-onpassword.Thesupervisorpasswordoverridesthepower-onpassword.
•Ifbothasupervisorpasswordandapower-onpasswordareset,youcandothefollowingonlyifyou
havethesupervisorpassword:
–Deletingthepower-onpassword
–Changingordeletingthesupervisorpassword
–EnablingordisablingtheWakeonLAN®andFlashoverLANfeatures
–EnablingordisablingtheInternalNetworkOptionROMfeature
–Changingdateandtime
–EnablingordisablingtheLockUEFIBIOSSettingfeature
–EnablingordisablingthePasswordatunattendedboot
–Specifyingtheminimumlengthforpower-onpasswordsandhar ddiskpasswords
–Changingthesettingforthesecuritychip
–EnablingordisablingtheBootDeviceListF12Option
–EnablingordisablingtheBootOrderLock
–EnablingordisablingtheFlashBIOSUpdatingbyEnd-Usersfeature
–EnablingordisablingtheInternalNetworkdevice
–EnablingordisablingtheInternalWirelessdevice
–EnablingordisablingtheInternalBluetoothdevice
–EnablingordisablingtheInternalWirelessWANdevice
–EnablingordisablingtheSecuritymode
–EnablingordisablingtheReaderpriority
–Erasingthengerprintdata
Chapter4.Security93