Lenovo W520 - question BitLocker TPM security tools

Similar Questions

• ProDesk 600 G1 BIOS configuration of the TPM secure through the BIOS Configuration utility

  We have a range of devices, computers HP desktop and laptops in our environment.  Devices are all running Windows 7 64 bit and should have Bitlocker enabled, but we found that some were not encrypted.  So I am trying to set up a remote BIOS and Bitlocker config activate software that we can get out via SCCM and then embed in a task sequence image for new machines.

  I use the Bios HP Configuration utility to check a BIOS password is set and then activate the TPM chip.  I took a BIOS config output of each of our models and created a settings file that has all of the TPM associated parameters of all models.

  At the moment I run Setup BIOS utility manually for testing.  On all models I tried that works very well, except for the 600 ProDesk G1 SFF.

  When I run the utility on the ProDesk 600 G1 MFS, it says that I have managed to update the settings, and when I check the BIOS, the TPM secure has been unhidden and the TPM Management was given to the operating system (two settings I change), but the TPM itself remains hidden.

  It's the release of the BIOS configuration utility (it uses the 2.60.13.1 version, which uses plaintext passwords.  I also tried with the 3.0.13.1 later version that uses password files - same result)

  C:\ > BiosConfigUtility64.exe /cspwd: "password" set: "TPM_Config.REPSET"
  
  < BIOSCONFIG Version = "2.60.13.1" Computername = 'HP600G1' Date = "24/07/2014" Time = "13:01:37 ' UTC '1' = >"
  
  < SETTING changeStatus = "pass" name = "Embedded Security Device" reason = "' returnCode '0' = >"
  
          < OLDVALUE > <! [CDATA [hidden device]] > < / OLDVALUE >
  
          < NEWVALUE > <! [CDATA [device]] > < / NEWVALUE >
  
  < / SETTING >
  
  < SETTING changeStatus = "pass" name = "Enable security on the next boot" reason = "' returnCode '0' = >"
  
          < OLDVALUE > <! [CDATA [disable]] > < / OLDVALUE >
  
          < NEWVALUE > <! [CDATA [enable]] > < / NEWVALUE >
  
  < / SETTING >
  
  < SETTING changeStatus = "pass" name = "The BONES of on-board safety management" reason = "' returnCode '0' = >"
  
          < OLDVALUE > <! [CDATA [disable]] > < / OLDVALUE >
  
          < NEWVALUE > <! [CDATA [enable]] > < / NEWVALUE >
  
  < / SETTING >
  
  < SUCCESS msg = "Successfully set BIOS config." / >
  
  < information msg = 'BCU return the value' real '0' = translated = '0' / >
  
  < / BIOSCONFIG >
  
  C:\ >

  And after a reboot (where it should activate the TPM), BIOS shows as disabled built-in safety device (see attachment for the image).

  I have tried everything I can think of to get this to activate, including:

  • Different versions of the BIOS configuration utility
  
  
  • Remove the password from the BIOS and the application in the same order as the parameters
  
  
  • Different passwords
  
  
  • Reboot and allowing the machine to start completely to Windows before checking if the setting took effect

  I also tried to add the utility and the commands for an SCCM package and it works directly and as part of a sequence of tasks to see if that makes a difference, but nothing I've done has activated the TPM module.

  I know that the TPM module works, as you can turn it on manually and then Bitlocker can be applied to the machine, but with thousands of devices in our environment, I need to get this job without the need for manual intervention.

  Has anyone else had this problem and found a solution?  Or has someone at - he managed to activate the TPM on the SFF of 600 ProDesk G1 using the BIOS Setup utility?  Any ideas / suggestions would be very appreciated!

  P.S. This thread was moved from the company PC - Compaq, Elite, Pro for HP PC Client management. -Hp moderator of the Forum

  This problem has now been resolved by HP.
  
  They provided a replacement motherboard for the test machine I was using that solved this problem. I don't know what kind of motherboard failure could prevent the activation via the script TMP chip but not prevent activation through the BIOS menu, but as a replacement solved the problem, then it must be a hardware failure.

• Life expectancy of a 'new' refurbished Lenovo W520

  Hi all!

  I recently bought a refurbished Lenovo W520, with a brand new SSD and the new ram as well. The model goes back to 2011 and it looks actually pretty new in this is the general appearance.

  These are purchased by companies whose users, I guess, probably used less intensely and probably with more care than the average user.

  My question is; How long should I wait for this machine to work? He's already got what I assume to be nearly half a decade on his back, and even if some essential (SSD and Ram) parts are brand new, I am always worried about the longevity of the rest of its internal components.

  Thanks in advance!

  -Philip

  I only really worry the cooling problems. It always speaks by making a much traveled W520. According to the number of hours of use, the laptop has had and the conditions, it has been preserved in, thermal paste could be replaced on the GPU/CPU and the fans/vents might need suddenly out with compressed air to remove any buildup. It's all a work of $6 to do yourself (materials: thermal paste and compressed air, remove the keyboard and the keyboard setting, remove the pipes on GPU/CPU.)

  I guess that you have received a new battery (obviously these age and there is no way the original spec is more) and the LCD shows no problem (Panel light darkens over time but always mine high with only a little pink cast near the corners - although to be fair, mine had a life shaken and fallen several times on hard surfaces of some long-distance).

  In the past, on other thinkpads, only other points of failure were the bearings in cooling fan requiring a replacement fan assembly failure and graphics (sometimes of the cable charts overwork through the hinge.) I have one of these problems with the W520 still. The hinge is better designed than many previous thinkpads and the cooling is less active which will span the life of any pads of the fan. It is with the 2000M GPU (1000M models have other issues because both had different designs cooling.)

  Currently I have an SSD mSATA Plextor (Win 7 Pro OS - put to test at SATA2 speeds) in slot mSATA near trackpad and a SSD Pro of Samsung 850 in the hard drive Bay (win 10 Pro OS - tested SATA3 sppeds.) The system works well. For awhile, I thought win 10 was never going to work right and I need to replace the W520 immediately but finally Nvidia fixed their optimus drivers and the laptop is really eye-catching win 10. (Technically the W520 is not listed by Lenovo, a sustained Win 10 portable if Microsoft said that he would retire.)

• The basic service of the TPM secure in Windows 2003

  The basic service of the TPM secure in Windows 2003 is configured to run automatically, but it stops. When you try to start it, I get the message "the TPM Base service on started and then stopped. Some services stop automatically if they have no work to do... "This is the normal behavior for this service? If supposed to work, what can I / check?

  Hello

  The question you have posted is related to the Server 2003 and would be better suited to the TechNet community. Please visit the link below to find a community that will provide the best support.

  http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home

  Thank you.

• BitLocker Drive preparation tool - fail

  Hello

  So, I try to activate bitlocker on my laptop drive encryption, which is already running Vista Ultimate x 86.  I was not initially intended, and I knew that if I wanted to later, I could allagedly use the Bitlocker Drive preparation tool, so I built it with a single partition.

  Now, I want to activate bitlocker, so I downloaded the drive preparation tool, but I when I run it, I get the following error:

  "The bitlocker Drive Preparation Tool cannot find a system of target drive.  You may need to manually prepare your drive for BitLocker. »

  So I search and find this article kb http://support.microsoft.com/kb/933246

  I tried to manually specify the system drive by running the command line: ' BdeHdCfg.exe - target: shrink - newdriveletter x: - size 1500-quiet - restart ", but she just runs for a few seconds and then returns to the command prompt, so I check the event log and find an entry under the logs event observer, applications and services, Microsoft, Bitlocker DrivePreparationTool, Admin and found events (event error 1 id) similar to what I saw in the GUI of not find a system drive.  Under the operational event folder, I found event ID 4104, "a volume did not meet the requirements for a target volume. Volume: C: reason: impossible to reduce the target volume of the requested size. "

  So in the above article, my error message with certain proposed resolutions: "temporarily disable the hibernation option and disk paging. Then, use the Windows preinstallation environment to remove the file Hiberfil.sys and Pagefile.sys file. Restart the computer in Windows Vista. Then run the BitLocker Drive preparation tool. "OR"reinstall Windows Vista. »

  So of course, I tried the first suggestion, disabling hibernation using "powercfg-h" off and delete the hiberfil.sys file, disabled a swap under System properties file and deleted the "pagefile.sys" and restarted.

  Always the same error :(

  Is the second action plan 'Reinstall Windows Vista' serious?  I want to activate the drive encryption, should not be this hard.  I don't think that requiring people to reinstall just because an application cannot function in a reasonable way to be an excuse...

  Hi benneh,.

  In the article you posted there are two different scenarios listed that could cause the error message:

  "The bitlocker Drive Preparation Tool cannot find a system of target drive.  You may need to manually prepare your drive for BitLocker. »

  In your post you referenced scenario 2 and the steps you took to solve it, but you reference scenario1 which is as follows:

  Scenario 1: You do not have enough free disk space to "at least 10 percent of the active partition must remain free after the partition size is reduced by 1.5 gigabytes (GB). To resolve this error, move the files to another partition or delete files. »

  Just to be sure that it is not the reason for your question; After subtracting the reduction in size of 1.5 GB for your total hard drive space always need it the 10 percent of free space on the active partition?  Please let us know.  Thank you.
  Shane
  Microsoft Answers Support Engineer
  Visit our Microsoft answers feedback Forum and let us know what you think.

• Error 0 x 80280803 - the BitLocker TPM

  Hi all

  I had the problem by adding the BitLocker protection key so that I have read the hard drive.
  Now, when I try to encrypt again, I encounter the error below.
  Error 0 x 80280803
  The command I use is
  cscript manage - bde.wsf - on c:
  and the message that I got
  Volume C:
  [OS Volume]
  ERROR: An error has occurred all by checking if the TPM storage root (SRK) key has a compatible authorization value. (code 0 x 80280803)
  Help, please.

  Hello ahNah,

  Under the following link has this information.  I hope this helps.

  Method 3: Reset the TPM secure lock period

  http://support.Microsoft.com/kb/926187

• T400: Error Message - there was a problem connecting to the TPM secure

  Hello

  I am a new user of ThinkPad. I just got my T400 a week ago, and I'm a fan of him immediately. But there's this little thing that really bothers me. The second day I used my laptop, I got this error message: "There was a problem connecting to the module of TPM (safety device) on this computer", and I got this message since that date, every time I turn on my laptop.  What it means? And how do I get rid of this error message? Thank you!

  Moderator Note: Type + error message added to the line object for clarity.

  go into the bios and check if the TPM secure is enabled or disabled in the BIOS. Make sure it's on. If the problem persists then call Lenovo, could be a hardware problem.

• The Lenovo ThinkPad W540 has TPM 2.0?

  The Lenovo ThinkPad W540 has TPM 2.0?

  Anyone know?

  In the manual, it seems that there is version 1.2

• Difficulty of internet connection after Security Tool Virus

  My mothers computer caught the security tool virus.  I finally had to reload Windows XP and Windows XP now works, but I can't connect wirelessly to the internet.  She got ahead through Linksys.  When I look under the modem it says connection cable to cable.  I'm assuming I erased the other information that I need to connect on the internet.  Any help will be appreciated.

  Here are some ideas of the fallout that occurs in your Internet settings after some infections have been deleted and how set things straight.

  Depending on how you removed the infection (the removal procedure is well documented), sometimes there are a few other things to do later.

  Some malware knows that you will try to get in the Internet to try to find a hair removal method if it adjusts things on your system to prevent you to do so.  Even if you delete the malware using several analytical tools, tools cannot tell if the Internet settings have been modified by malicious software or put you that on purpose so he leaves the only parameters (and your system cannot connect).

  The malware hope that you will not be able to understand these things and give up and just reinstall your XP, do an install repair or by using a Restore Point.  Sometimes it breaks these things too, but you can usually remedy without the use of one of these methds (which aren't really patches at all)...

  If you have reinstalled XP, this may not apply to your situation, but it would be a good start:

  We will check your network connection properties.

  Some malware will alter these settings and your anti malware software can't tell if you have changed the malware changed them or so, after removal of infections, it will leave just the settings as he finds them (it is usually a good thing), but can leave your disabled Internet access.
   
  Click Start, run and enter in the box:

  Inetcpl.cpl

  Click OK to launch the Internet Properties Control Panel, choose connections, LAN settings.

  Or, in Internet Explorer click on tools, Options, connections, LAN settings.

  These settings control your Internet access for all browsers.

  On most environments, not independent, there will be check automatically detect settings and the other boxes are (as Proxy Server) is disabled.

  Automatically detect the setting checked =
  Use the automatic configuration script = unchecked
  Use a proxy server for your LAN = not checked

  Make changes, then click OK, OK to save the settings.

  Check your settings for how your network adapter gets its IP and DNS settings.  On most home systems, these parameters must be defined for the system will get the settings automatically.

  If you have another system on your network that works, you can compare these settings with the settings of the system which is not a work and make adjustments.

  Click Start, settings, Control Panel, network connections, and then select your current network connection.

  On the general tab, click Properties.

  In the drop down in the Middle, find and highlight the selection of Internet Protocol (TCP/IP) and click Properties.

  In the Internet Protocol Properties window, the usual selections are to get the IP and DNS settings automatically.  Select the following two options:

  Obtain an IP address automatically

  Get a DNS server address automatically

  The rest of the options on the screen should then be grayed out/not available.

  Make changes, then click OK, OK to save the settings.

  Restart your computer and test your connection.

  If it still does not work, check your settings are still in place after a restart and then release and renewal IP of your network device configuration settings.

  Click Start, run and enter in the box:

  cmd

  Click OK to open a command prompt window, and then type the following commands:

  ipconfig/release
  ipconfig / renew
  output

  Restart your computer and test your connection.

  If this does not work, follow these steps:

  Please provide additional information on your system:

  What is your system brand and model?

  What is your Version of XP and the Service Pack?

  Describe your current antivirus and software anti malware situation: McAfee, Norton, Spybot, AVG, Avira!, Defender, ZoneAlarm, PC Tools, MSE, Comodo, etc..

  Click Start, run and enter in the box:

  Msinfo32

  Click on OK and when the system info summary appears, click on Edition, select all, copy, and then paste the information here.

  There will be some personal information (such as the user name and the name of the system), and anything that turns information private for you, simply delete the pasted information.

  This will minimize back Q & A and eliminate guesswork.

  Do, or do not. There is no test.

  I need YOUR voice and the points for helpful answers and propose responses. I'm saving for a pony!

• removal of security tool

  I am trying to remove malware from my computer security tool, and I don't have the slightest idea what to do! If someone could help me with this, I would appreciate it.

  you will need expert help in the removal of malware & this forum is not the place in my humble opinion. try to go to Hotmail.com & post a new topic in the malware removal forum ask for help. they can get rid of the infection and to make your pc run well again. This is a free site & they are busy, so be patient if you decide to try.

• Security tool patch

  I accidentally installed the security tool on my computer.  I downloaded the file MRT beeps of computers web site, but the security tool prevents the activation of the file (MRT.exe) by popping up every 15 seconds.  Help!

  Follow all the steps described in the page to Remove SecurityTool and Security Tool (uninstall Guide) at BleepingComputer.com .  It is particularly important to run Rkill.com, as shown here.

• Security tool

  About security tool infection - if you have a dual-boot computer you can simply start the infected partition on the unaffected system and scan with malwarebytes to get rid of him?

  Who would not be able to completely remove the infections.  It might be able to delete infected files, but it would not be able to clean the Windows registry of the infected system. Boulder computer Maven
  Most Microsoft Valuable Professional

• Security tool virus causes corruption OS

  I just got the security tool virus. Looked up how to get rid of it and manually the files deleted and restarted my computer to see if it worked... Try to load windows xp pro and I get a file \WINDOWS\SYSTEM32\CONFIG\SYSTEM is missing or damaged. So, I'll get my windows disk and insert it. Run recovery... get a BSOD BAD_POOL_CALLER. What can I do to fix this and get my computer actually to run again?

  Have not changed anything on my computer in the past months. This just happened this evening after I got this virus.

  Tried to start recovery again, tried to do it on my c drive just to see what would happen. It worked but me is not good because the OS is on d.

  Reign21,
  Thanks for posting with us.  Here's the first thing I would say.

  Disconnect all external devices (printers, USB hubs, USB keys, etc.) and then start.

  If this solves the problem, then add back devices at a time until you discover the piece of hardware causing the issue.  Then get any drivers\software update for the device.

  Also this error can be caused by memory problems.  If you have several RAM sticks, then you can remove half of them and try to run Setup again. Mike - Engineer Support Microsoft Answers
  Visit our Microsoft answers feedback Forum and let us know what you think.

• I GOT SECURITY TOOL POP UP, CAN I GO ONLINE TO GET MALWARE, I TRIED AVG8.5 IN SAFE MODE, BUT IT WILL ELIMINATE NO PROBLEM.

  WHEN I TRY AVG DESKTOP TURNS 10 SECONDS AND ONLY SAID: NO PROBLEM, BUT OF COURSE THE SECURITY TOOL WINDOW IS ALWAYS PRESENT.

  Your system is infected with a rogue antivirus program. It's called "thugs" because he pretended to be a good guy but is really bad. Don't pay them!

  Search for removal here Bleeping Computer how removal steps - of - http://www.bleepingcomputer.com/forums/forum55.html
  or here - Malwarebytes malware removal Guide - http://tinyurl.com/5xrpft

  Malwarebytes' Anti-malware (MBAM) or SuperAntiSpyware will often do the job. Both have free versions and you don't need to buy these programs.

  You need to get all the programs/tools from a different computer, known to clean and put it on a Flash DRIVE or burn it to a CD - R to be used on the infected machine.

  These can work for you, and all can be good. However, in many cases the computer will also infected with other horses of Trojan and protected by a rootkit. These machines are extremely difficult to clean.

  If your machine is one of these cases, either get guided help to one of the following specialized forums OR backup your data and do a clean install of Windows. It's your choice. If you don't know how to back up your data or how to do a clean install, you can take your machine to a local computer professional. I do not recommend using BigComputerStore/GeekSquad types of places.

  PLEASE DO NOT DISTRIBUTE NEWSPAPERS IN MS FORUMS

  http://aumha.net/viewtopic.php?t=4075 - display FAQ
  http://aumha.NET/viewforum.php?f=30
  http://www.bleepingcomputer.com/forums/forum22.html
  http://www.dslreports.com/Forum/cleanup
  http://www.GeeksToGo.com/Forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
  http://www.Malwarebytes.org/forums/index.php?ShowForum=7 MS - MVP - Elephant Boy computers - don't panic!

• I HAVE WINDOWS FOR SOME REASON SECURITY ANY. THERES A EU ON MY COMPUTER SECURITY TOOLS. AND IT TOOK OVER. AND I CAN'T GET RID OF BED EITHER.

  THIS PROGRAM OF SECURITY TOOLS HAS TAKEN POSSESSION OF MY COMPUTER. I CAN'T SAFELY FILES, I CAN DOWNLOAD MCAFEE. AND I CAN'T GET RID OF IT.    BETTY

  PLEASE PLEASE HELP

  Security Tool is a rogue antivirus application that deliberately gave the system reports of false threats to security on your computer and displays notifications to make you think that your PC is infected with malware or fake security alerts

  To remove it try to scan with

  http://www.Malwarebytes.org/MBAM.php

  Microsoft Malicious - 32-bit removal tool
  http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

  Microsoft Malicious removal tool - 64 bit
  http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

  For further shore visit this link

  http://www.bleepingcomputer.com/virus-removal/remove-security-tool

  http://www.howtogeek.com/HOWTO/9505/how-to-remove-security-tool-and-other-roguefake-antivirus-malware/