Help disabling Embedded Security

[greg025]

OK, I admit, I was silly; I bought a used T42P which was/is perfectly ok. However, I saw the fingerprint reader... I also saw the thread about fingerprint security of folders...

Anyway, I installed and setup all the things as mentioned and that was OK but decided I didn't really want all that stuff running every time I boot. Now to uninstall. Unfortunately, I can't remember what administrative password I assigned when doing the initial install.

Also, for some reason, at logon now, I have to enter my passphrase (not my password or fingerprint). It was working fine scanning my FP yesterday...

Any ideas anybody?

TIA Greg Harris

[greg025]

OK, things have degraded even further. After closing the laptop at work and coming back home, I open the lid to be prompted with the Client Security login screen again.

This time, it won't even let me enter a Passphrase (and the options button is disabled). Even if I change the username there is still NO place to enter a password or pass phrase and the fingerprint reader does nothing!

Someone please?

[davidspalding]

I suspect that you have learned a very, very, very important lesson. Write down passwords and keep them in a secure place.

That said ... you may want to fully power off your laptop (even remove the battery for several seconds), then power up. You might also try booting in to the predesktop area (press blue "thinkpad" or "Access IBM" button on boot), I recall that it can help you recover a password IF you enabled the passphrase/3 questions backup method in CSS.

If none of this works ... do you have the Rescue and Recover discs to return to factory condition? (Hope you have good, reliable backups of your data.)

Be aware that I don't think anyone here can help you "hack" the software. In fact, I believe there's an FAQ item prohibiting this on the forums.

[mr_anime]

Hi there greg025,

I hope I'm not too late in replying to help your situation.

I went through a similiar situation, in which my credentials were not being recognized by the Embedded Security Subsystem.

What you have to do is shut down the machine entirely. Then turn it back on and boot into the BIOS. Once in the BIOS, select the SECURITY menu, and then the IBM SECURITY CHIP menu. Once inside there, select the option to CLEAR IBM SECURITY CHIP.

This should clear out the existing passwords, settings, and encryption keys stored in the chip.

Be warned, if you have encrypted files/folders using IBM's file encryption utility, or any other program that uses the Embedded Security Subsystem to decrypt things (like Ultimaco PrivateDisk), YOU WILL BE UNABLE TO DECRYPT THESE FILES AFTER COMPLETING THIS PROCESS.

When you're done in the BIOS, you should be able to reboot back into Windows, log in using your Windows account password, and be able to re-setup the Security Chip settings.

[unicorn]

Hi!
I used the Client security software + file and folder encryption.
"I bewared of these software so I created a backup admin.key, a private1.key, system, and user. In hidden folders: User and System folders contained SecurityAdminRoot.key ...
My T40 doesn´t have a floppy disk. And in Bios setup/Security menu I didn´t see the IBM SECURITY CHIP menu / CLEAR IBM SECURITY CHIP.
After I reinstal the winxp and the Client security software + File and folder encryption. And run the Client Secirity Setup Wizard it doesn't work with my Passphrase (as what I remember)

Please help me to recover the setup or clear the IBM Securitz Chip.

IBM softwares make me crazy. When I instal all their software my computer run as a turtle with a bundle of hidden processes , Exp. IBM easy eject should change to IBM more copmlex eject, ultrnav, access wireless connection ... are redundant too. I think that, WinXp did better.