Reset Security Chip

Message

kam_ · #1 Post by **kam_** » Mon Mar 20, 2006 3:12 pm

Strange goings on...

I re-installed my T43p with the recover disks. I then installed the Client Security Solution, and it's saying i already activated the security chip, and enter the password.

The password i used previously isn't working. Not a big deal because i backed up everything protected by the security chip.

Anyway it says i should clear/reset the security chip using the BIOS - except the option to clear it isn't there. Only disable/enable. I've tried dissabling it and it tells me to go enable it.
When i enable it it asks for the password again.

Right now i'm using 'software installer' so the Client solution is still branded IBM and in the 'Acess IBM' program group. Previously (before i re-installed) i had used System Update to get the 'Thinkvantage' version of the Client Security Solution.

I guess worst case i could install that, but i'd rather not - i find alot of the programs updated by System Update cause compatability problems.

andyP · #2 Post by **andyP** » Mon Mar 20, 2006 4:33 pm

kam_ wrote

the option to clear it isn't there

Which bios version do you have? I have version 1.24 and the option to clear the chip is there.

kam_ · #3 Post by **kam_** » Mon Mar 20, 2006 4:39 pm

I have version 1.25 (1YET60WW)

If you have time can you give me the exact location of it in the menu? I've looked everywhere, and i'm sure its on the same page that the enable/disable is on.

andyP · #4 Post by **andyP** » Mon Mar 20, 2006 5:02 pm

I'll try, please remember I'm working with a german system.
In client security software there is an "advanced" entry where you can change the status of the chip - "enalbed" or "disabled. (I have version 6). If I remember rightly in earlier versions there was an entry in the control panel - I stand to be corrected.
In bios in - configuration - security - security chip - I have the option to clear the chip.

?? have you noticed ?? the bios version you have has been removed from the "device driver matrices site" ??

Scroll to the bottom of the link

http://www-3.ibm.com/pc/support/site.ws ... MIGR-59096

and you see:

"1.24 1YET59WW (1.24) Current release
1.25 1YET60WW (1.24) Removed from the site"

maybe a call to support and they can explain why

kam_ · #5 Post by **kam_** » Mon Mar 20, 2006 9:36 pm

Interesting! i'm going to downgrade it to 1.24

thanks for the help.. i'll keep you posted on what happens

mattster · #6 Post by **mattster** » Mon Mar 20, 2006 9:54 pm

In order to see the option in the BIOS, you need to shut the system down completely. When you turn the system back on, go into the BIOS to the Security chip section. You should now see the option to clear the chip.....

Matt

kam_ wrote:Strange goings on...

I re-installed my T43p with the recover disks. I then installed the Client Security Solution, and it's saying i already activated the security chip, and enter the password.

The password i used previously isn't working. Not a big deal because i backed up everything protected by the security chip.

Anyway it says i should clear/reset the security chip using the BIOS - except the option to clear it isn't there. Only disable/enable. I've tried dissabling it and it tells me to go enable it.
When i enable it it asks for the password again.

Right now i'm using 'software installer' so the Client solution is still branded IBM and in the 'Acess IBM' program group. Previously (before i re-installed) i had used System Update to get the 'Thinkvantage' version of the Client Security Solution.

I guess worst case i could install that, but i'd rather not - i find alot of the programs updated by System Update cause compatability problems.

davidspalding · #7 Post by **davidspalding** » Tue Mar 21, 2006 5:51 pm

I have a T41 which, when I try to configure CSS and activate the security chip, tells me it was protected with a password. Don't know what it was (it's a work computer, previous owner had left the chip off).

Is the "clear chip" option in BIOS specific to certain T's, I wonder?

mattster · #8 Post by **mattster** » Tue Mar 21, 2006 7:57 pm

The Clear Chip option is only specific to T's that have a security chip in them. Certain early models of the T40 series shipped without a chip if I remember correctly and those will not display the option at any time.

But, to try and help answer your question, the Clear Chip option will only appear if the chip is enabled if memory serves me correctly. So, if you turn the chip on, you should see the option. If you don't, it may require a cold boot to see it.

davidspalding wrote:I have a T41 which, when I try to configure CSS and activate the security chip, tells me it was protected with a password. Don't know what it was (it's a work computer, previous owner had left the chip off).

Is the "clear chip" option in BIOS specific to certain T's, I wonder?

kam_ · #9 Post by **kam_** » Tue Mar 21, 2006 9:18 pm

yup a cold boot made it appear on my t43p. But now my hd pw is mangled (see other post)

davidspalding · #10 Post by **davidspalding** » Wed Mar 22, 2006 2:22 pm

Uh-oh. Disabling the security chip while any HDD protection or encryption is active ... I get the chills just thinking about it.

kam_ · #11 Post by **kam_** » Wed Mar 22, 2006 4:17 pm

Actually the security chip has nothing to do with the HD password. It was an unrelated problem that mangled the password.

There seems to be alot of confusions about what the security chip does.

The security chip is just there to hold your secure key. Think of it like PGP except the private key is held in the chip and not on disk. Entering the right password returns back your private key which is used with whatever IBM software to protect your information eg password manager.

With PGP, even if you didn't have the pasword you could retreive the Private key and brute force the pasword offline (with PGP the passphrase decrypts the private key)

With the security chip you need to keep firing password at it and hope it works. With 3 password atempts per boot and a lockout counter this could get slow!

This is precisely why there is an 'clear security chip' option in the bios. By executing this, it erases any key that was in the chip previously and generates a new one when you next activate it. The result is any data encrypted with the old key is permanently lost.

The BIOS passwords are held in an eeprom on the main board, and can actually be read with the right equipment (see the miriad of companies on google selling this service). The hard drive password is held in an eeprom contained in an MCU on the harddrive. This can also be recovered (again see google) but is more specialised.

davidspalding · #12 Post by **davidspalding** » Wed Mar 22, 2006 4:54 pm

Confirmed, the "security chip clear" option in BIOS does not appear in my T41. Not that I'm worried, it's a work pc.

System Model 23739EU
BIOS Version/Date IBM 1RETDNWW (3.19 ), 10/13/2005
SMBIOS Version 2.33

tpforever · #13 Post by **tpforever** » Tue May 23, 2006 2:44 pm

thanks to you guys i managed to reset the password...i was about to freak out when i found this thread.
i cold start brought up the "clear security chip" option in the bios on my t41p.

krma-thkpds · #14 Post by **krma-thkpds** » Wed May 24, 2006 10:38 am

So, how do I get reset security chip option in BIOS? I don't have it. Nor do I have CSS installed. Though the chip is enabled in BIOS there is no option to reset it. I have t43p.

tpforever · #15 Post by **tpforever** » Wed May 24, 2006 2:22 pm

as described the option is only available in the bios if you do a cold start which means that you have to shutdown (not restart) the thinkpad. then access the bios right away.

Reset Security Chip

Reset Security Chip

Re: Reset Security Chip

Who is online