T40 Bios Security Bug???

[makai]

Well as some of you may know, a T41 I shipped to Vegas got stolen while in the care of USPS. (don't really mean to drag that topic out again)

So anyways, I ended up purchasing a used T40 from Underclocker as a replacement... great machine, by the way.

I went ahead and set some Bios Security passwords for the Bios, and Hard Drive. All seemed to go well and sure enough if I try to enter the bios, I'm prompted for the passwords. However, after doing a little more configuration/customization of Windows and Apps, I restarted the machine and went to check the Bios security settings once more. To my surprise, I was able to get into the Bios with only the Bios password! Prior attempts always asked for the Hard Drive password too! Huh???

IS THIS A BUG with Bios ver 3.23??? I did a search of the forum, but didn't find anything specific, not to mention that my "Bios security bug" search caused a 68+ page result.

After this happened, I tried to duplicate the problem again, but so far it hasn't shown up. Has anyone seen this before???

It's a bit unnerving since this is the first time I've ever set Bios passwords on a T4x... only to discover a bug!?!?

makai

[rssb]

I have been using passwords since day one, never had any problems.

Did you ever save the configuration before exiting the BIOS via F10 ? May be you didnot press yes and hit no instead and moved on ???

[richk]

You can always get to the BOIS with just the supervisor password. Just pull the HD.

[makai]

Did you ever save the configuration before exiting the BIOS via F10 ?

Absolutely! As stated... Prior attempts always asked for the Hard Drive password too! All passwords I set were definitely saved and still present in the Bios when it happened. Like I said though, I haven't been able to duplicate, so I don't know what to think. Hmmm... such is the "MO" of a bug!

I will notify Lenovo and ask they investigate, although, since this is an older T4x model, they may not take the time. Still, this is a Security issue if what I saw can happen, so the least I could do is notify them.

[makai]

You can always get to the BOIS with just the supervisor password. Just pull the HD.

The problem is NOT that I can't get into the bios. The problem is that if you set HD passwords also, you should be prompted to enter both the BIOS and HD passwords before you're allowed to enter the bios. I was only prompted to enter the Bios password and NOT the HD password too. I was allowed to enter the Bios with ONLY the bios password.

[makai]

Something is very buggy!

I had the machine unpowered for about 2 hours. When I turned it on, I was prompted for the HD password. I never set the "Power-ON" password in the bios, so it's strange that I should now be prompted to enter the HD (?) password??? Don't know what's going on, or if this is "normal" for a T-series to require the HD password after a nominal power down.

I'm beginning to think the bios is messed up or something. Maybe a bad flash? In any case, I've now disabled all passwords just in case, and will reflash the bios.

Sheesh, the things I have to go through just to twart a thief!!!

[richk]

You always have to enter the hard disk password at power up. This is true for all thinkpads and has always been true.

[makai]

You always have to enter the hard disk password at power up. This is true for all thinkpads and has always been true.

Thanks for confirming that. In any case, something is still weird because sometimes it went straight to Windows logon and never asked for a password. I'll reflash the bios and see what happens. Thanks!