Embedded Security Chip questions

[Edward]

I have a X41 and coming from the Dell world, I'm confused with IBM's custom security software. Can someone help me answer these questions?

1. How is the password to the Embedded Security chip set? I've turned
on/off this function (via Bios and/or Client Security Solution--> Advanced) but there does not seem to be a way to (re)set the password ... is it defaulting to my Windows sign-on password?

2. What does the Embedded Security chip do? If its not activated, does that mean I cannot use the fingerprint reader?

3. Is there a way to completely clean out IBM custom security settings so I don't have to worry about it in the future? Once a year or so, I tend to reinstall Windows on the HD to force me to backup and clean out the junk that's accumulated ... I don't want to have to worry about an IBM password that I may have set and don't remember anymore.

Thanks.

[christopher_wolf]

Well, this might get a bit dangerous,

1.) The password is set by the System Admin; in this case, you through installing the CSS Software and giving it a passphrase

2.) The Embedded Security Chip adds a layer of security that is tamper-evident and very robust for a laptop. That said, though, it need not be activated for the normal operation of the system or windows logon. You can use the fingerprint reader just fine without having activated the chip. There are, however, some advanced settings for the FPR that require the Chip being activated.

3.) That, as far as I know, won't happen with the CSS passphrase. I would be more worried about a HDD Password in that case than the CSS passphrase; still, *do not* forget it once it is set. Also, it will come up with lock out times if you enter it incorrectly several times or take too long.

Bottom line, if you don't feel like you need it or will not need it in the future, best to leave it alone and simply enjoy your Thinkpad. HTH