This chapter provides information about how to protect your computer from theft and unauthorized use.
Security features
The following security features are available on your computer:
• Computrace Agent software embedded in firmware
The Computrace Agent software is an IT asset management and computer theft recovery solution.
The software detects if changes have been made on the computer, such as hardware, software, or the computer call-in location.
Note: You might have to purchase a subscription to activate the Computrace Agent software.
• Cover presence switch (also called intrusion switch)
The cover presence switch prevents your computer from logging in to the operating system when the computer cover is not properly installed or closed. To enable the cover presence switch connector on the system board, to the following:
1. Start the Setup Utility program. See “Starting the Setup Utility program” on page 89.
2. Set the Administrator Password. See “Setting, changing, and deleting a password” on page 90.
3. From the Security submenu, select Chassis Intrusion Detection ➙ Enabled. The cover presence switch connector on the system board is enabled.
When the cover presence switch detects that your computer cover is not properly installed or closed when you turn on the computer, an error message will be displayed. To bypass the error message and log in to the operating system, do the following:
1. Properly install or close your computer cover. See “Completing the parts replacement” on page 77.
2. Press F1 to enter the Setup Utility program. Then press F10 to save and exit the Setup Utility program. The error message will not be displayed again.
• Ability to enable and disable devices and USB connectors
For more information, see “Enabling or disabling a device” on page 91.
• Integrated fingerprint reader (available on some models)
Depending on the models of your computer, the keyboard may have an integrated fingerprint reader.
By enrolling your fingerprint and associating it with a Power-on Password, a Hard Disk Password, or both passwords beforehand, you can start the computer, log on to the system, and enter the Setup Utility program by swiping your finger over the reader, without typing a password. Thus fingerprint authentication can replace passwords and enable simple and secure user access.
• Startup sequence control
For more information, see “Selecting or changing the startup device sequence” on page 92.
• Startup without keyboard or mouse
Your computer is able to log in to the operating system without keyboard or mouse connected.
• Trusted Platform Module (TPM) (available on some models)
Trusted Platform Module is a secure cryptoprocessor that can store cryptographic keys that protect information stored in your computer.
© Copyright Lenovo 2013, 2015 31
Locking the computer cover
Locking the computer cover helps prevent unauthorized people from gaining access to the inside of your computer. Your computer comes with a padlock loop so that the computer cover cannot be removed when a padlock is installed.
Figure 7. Installing a padlock
Attaching a Kensington-style cable lock
You can use a Kensington-style cable lock to secure your computer to a desk, table, or other non-permanent fixture. The cable lock attaches to the security-lock slot at the rear of your computer and is operated with a key or combination depending on the type selected. The cable lock also locks the buttons used to open the computer cover. This is the same type of lock used with many notebook computers. You can order such a cable lock directly from Lenovo by searching for Kensington at:
http://www.lenovo.com/support
Figure 8. Kensington-style cable lock
Preventing unauthorized access to your computer
You can use BIOS passwords and Windows accounts to prevent unauthorized access to your computer and data.
• To use BIOS passwords, see “Using BIOS passwords” on page 89.
• To use Windows accounts, do the following:
1. Depending on your Windows version, do one of the following:
– For Windows 7: Click the Start button to open the Start menu, and then click Control Panel ➙ User Accounts.
– For Windows 8 or Windows 8.1: Move the pointer to the top-right or bottom-right corner of the screen to display the charms. Then, click Settings ➙ Change PC settings ➙ Accounts.
– For Windows 10: Click the Start button to open the Start menu, and then click Settings ➙ Accounts.
2. Follow the instructions on the screen.
Chapter 4. Security 33
Using fingerprint authentication
If your keyboard has a fingerprint reader, you can use fingerprint authentication to replace passwords for simple and secure user access. To use fingerprint authentication, first enroll your fingerprints and associate them with your passwords (such as the power-on password, hard disk password, and Windows password).
Use the fingerprint reader and the fingerprint program to complete this procedure.
To use fingerprint authentication, do one of the following:
• For Windows 7, Windows 8, or Windows 8.1: Use the Fingerprint Manager Pro or ThinkVantage Fingerprint Software program provided by Lenovo. To open the program, see “Accessing a program on your computer” on page 5. For more information about using the program, refer to the help system of the program.
• For Windows 10: Use the fingerprint tool provided by Windows. Click the Start button to open the Start menu, and then click Settings ➙ Accounts ➙ Sign-in options. Follow the instructions on the screen.
To use the fingerprint reader, refer to the documentation shipped with the fingerprint keyboard or located on the Lenovo Support Web site at http://www.lenovo.com/support/keyboards.
Using and understanding firewalls
A firewall can be hardware, software, or a combination of both depending on the level of security required.
Firewalls work on a set of rules to determine which inbound and outbound connections are authorized. If your computer is preinstalled with a firewall program, it helps protect against computer Internet security threats, unauthorized access, intrusions, and Internet attacks. It also protects your privacy. For more information about how to use the firewall program, refer to the help system of your firewall program.
The Windows operating system preinstalled on your computer provides the Windows Firewall. For details on using the Windows Firewall, refer to “Windows help system” on page 121.
Protecting data against viruses
Your computer is preinstalled with an antivirus program to help you guard against, detect, and eliminate viruses.
Lenovo provides a full version of antivirus software on your computer with a free 30-day subscription. After 30 days, you must renew the license to continue receiving the antivirus software updates.
Note: Virus definition files must be kept up-to-date to guard against new viruses.
For more information about how to use your antivirus software, refer to the help system of your antivirus software.