Leon wrote:are there 2 passwords or three you can set? what do you use to encrypt your hard drive?
seems to me this is the best use of the bios screen, since it would give you a chance to get it back...i would also specifically say on the screen that passwords are set, machine is useless without, etc. so they wouldn't mess up the machine trying.
anybody out there using the internal security chip? if so, how?
@Leon:
I am using the internal security chip. You have to download the Software from the IBM Web site. It replaces the Winlogon with the UVM-Authentification. Additional you can encrypt folders and files, if you want. But for this I am using Safeguard Easy from Utimaco for full HD encryption. This is the only Software available that uses the IBM TPM Chip (Safeguard Easy Version 4.0, it is brand new).
In the Bios there are three passwords: user password, HD password and supervisor password. User password is grap, because you can disable it easily by unplugging the CMOS Battery.
I am just using HD Password and supervisor password, which are very strong and secure. With this two passwords it is impossible to use a stolen or lost Thinkpad without replacing HD and motherboard (which is probably as expensive as a new Thinkpad). But if the HD isn't fully encrypted, there is a way to recover the Data, even with an HD Password. But it is expensive and only one company in the US is doing it.
T40p 2373-g1g: 1.6 GHz, 1536 MB RAM, 160 GB @ 5400 rpm drive, 64 MB Video, IBM a/b/g II, CD-RW/DVD Combo II, M10 Fan, Ubuntu 8.04