W500 TPM or Bitlocker question

Similar Questions

• TPM + Bitlocker question Edge E540

  Hi all

  TPM is not found on my new E540 (20: 6).

  Nor by the TPM console secured by Bitlocker.

  I looked around in the BIOS / UEFI but without success.

  Upgrade to the latest version of the BIOS is installed, also all THE other updates that would have shown to me by Lenovo Update AND Windows Update are installed.

  Somewhere that it was written that you would need to install Intel Small Business Advantage (which is also automatically installed by Lenovo Solutions for Small Business), but Intel Small Business Advantage or Lenovo Solutions for small businesses will be installed. ErrorMessage is: "this system does not support installing Intel little advantage.

  Is there a (hidden) BIOS option or any other trick to activate the TPM?

  Additional information:

  Im running Windows Pro 8.1.

  The Device Manager shows 2 problems:

  -Intel Wireless Bluetooth 4.0 + HS-adapter (impossible to verify the digital signature of the driver)

  -Enumerator of IWD Bus (there are two people, a job, the other can not load the drivers because of the name of the object being already existing)

  Lenovo Solution Center's announcement an "unknown device", which I cannot find in Device Manager (also not when activating "also show hidden items").

  In list of ThinkPad E540 FRU we total 18 planars (motherboards) listed.  The low 9 do not have TPMs (what means NTPM).  So these models no TPM exists without a doubt, the part that I don't know is what has come (or should have came) with your system.  My role is to software and support, I'm sorry I can't help you further.  All I can do is tell you what I know.

• Microsoft Surface, TPM and Bitlocker problems

  I currently started to deploy Microsoft Surface Pro and I'm having problems with the TPM, Bitlocker and AD.

  I followed this guide and my backup of Windows 7 machines very well.
  http://TechNet.Microsoft.com/en-us/library/dd875529 (v = ws.10) .aspx

  Process:

  Create the image Windows 8 Enterprise on Surface Pro #1

  Sysprep image

  Capture image using DISM

  Deploy the Image for Surface Pro #2

  Once the Surface Pro #2 out of Sysprep the TPM secure status is "the TPM module is ready for use with reduced functionality.

  If I clear the TPM, the Surface will reboot and push me with an American Megatrends BIOS/UEFI "TPM Page" page.

  Text on the Page:

  "A configuration change has been asked to turn them on, activate, delete, activate and enable the TPM module

  This action erases and turn on TPM (Trusted Platform Module) computer

  WARNING: This application will remove key stored in the TPM

  Press F12 to activate, activate, delete, activate, and enable the TPM module

  Press ESC to reject this change request and continue

  Can I then clear the TPM, and it restores a State "the TPM module is ready for use.".

  So when I go to turn on Bitlocker I get the message "require group policy settings that specify a recovery password before encrypting the drive.  Surface Pro #1 got out of Sysprep and backup is keys properly and nothing to enable Bitlocker necessary.  I was hoping that after clearing the TPM, Surface Pro #2 would be able to do the same thing, but it seems at some point, #2 is not key on AD backup.

  Checking the attributes in Surface Pro #2 Ad Watch "msTPM-TpmInformationForComputer" is filled.  'msTPM-OwnerInformation' is not knowledgeable.

  Hi Phelptwan,

  As you try to create Windows 8 Enterprise on Surface Pro images, I suggest you to report this issue in Windows 8 IT Pro TechNet Forums: http://social.technet.microsoft.com/Forums/windows/en-US/home

  Thank you.

• TPM and Bitlocker

  Anyone know if the Ideapad S10 - 3 has a series module TPM?

  If so, can I install the bitlocker without spoiling the OneKey Recovery feature.

  I saw several posts indicating that onekey gets sprayed upward if the size of the partition is changed.

  It seems that bitlocker will reorganize the score a little structure.

  Please notify.  Thanks in advance.

  -Larry

  System: Lenovo Ideapad S10-3, m/t 0647-29U

  Hello...

  lczerkie wrote:

  Anyone know if the Ideapad S10 - 3 has a series module TPM?

  IdeaPad S10-3, m/t 0647-29U

  Nope...

  ThinkPad have TPM, Ideapad are not equipped...

  cordially KalvinKlein

• Dell place 8 Pro 3G - Sleep / Wake Up questions

  Hello

  A few days ago I bought the Dell coming Pro 8 3 G tablet. I have all available Windows Updates, latest drivers and BIOS of 'My Dell'. Unfortunately, my Tablet has some problems with the mode 'sleep'.

  1. only the 'Stop' and 'Restart' options are available in the drop-down list on 'Power' in the charming bar. 'Sleep' is not available and I can not turn off the screen by pressing the power button / stop on the right side of the tablet. I did a few tests using the powercfg command-line tool and I found, the driver mobile (or hardware) prevents the past in standby mode: if I disable the driver, I can put my device in mode 'sleep' without any problem.

  Mobile broadband driver:

  Dell 5570e Wireless HSPA + (42mbps network) Mobile Broadband Card #4
  Date: July 9, 2014
  Version: 14.7.1050.64

  2. to wake up to the top of the device to sleep mode does not work if you do this after the first 10 seconds in mode 'sleep'.

  When I disable WiFi driver in Device Manager, clock works well, even a few hours after the mode 'sleep' was launched.

  WiFi pilot:

  Dell 1538 wireless 802.11 a/g/n adapter.
  Date: July 4, 2014
  Version: 3.7.2.59655

  I don't know if these questions are based on the hardware or driver/software based.

  Everyone knows about similar problems?

  Kind regards

  Dominik

  Hello, I had the same problem and I tried all drivers update possible solution (reformatting my Tablet 6 times), the update of windows files, etc... Nothing helps. In the end, I found a similar problem for a Dell location 11 Pro user who suggests to turn off the TPM and Bitlocker. As soon as I disabled it Win8 table bitlocker and TPM/Bitlocker from the Bios (Secure boot - disabled), the Tablet began to wake from sleep with no problems... it's been 1 week now and it has not failed once (it allows to get a black 3 - 4 times per day before the change of the screen).

• BitLocker in Vista 32 bit Ultimate activation is not possible on Tecra M4

  It of not possible to enable BitLocker with my Tecra M4 Bios 3-50 and TPM 3.00.

  BitLocker TPM error message not found. Technical Library Microsoft says Vista SP1 has TPM V1.2 for install. In Toshibas Read Me in Pakcke 3.00.1178.00 of the update is displayed V1.2 and possible Bitlocker with this package. But Infinion administrator

  Parametriesierungstoll displays only the TPM 1.1 and the selftest passed ok, but BitLocker find no TPM.
  What should do? Thanks for help.

  Need for BitLocker TPM v1.2

  The M4 has only v1.1, you will need to disable the TPM and to do this:

  http://www.vistaclues.com/enable-BitLocker-without-a-TPM/

  Vista tells you he needs a module of TPM for BitLocker, but it happens. To enable BitLocker without a TPM, follow these steps:

  1. open the Group Policy Editor by clicking on start, type gpedit.msc, and then press ENTER.

  2. navigate to computer BitLocker Drive Windows\Chiffrement userconfiguration\administrative ordinateur\modeles.

  3. double-click on Control Panel settings: activate the Advanced Boot Options.

  4. click on activate. Then, select the allow BitLocker without a Compatible TPM check box.

  Click - allow - bitlocker.png

  5. click on OK.

• W7 and my new HP PC - Bitlocker

  I have a new HP PC (HP Pavilion Elite h8-1039).  If I'm on W7 version that supports encryption with BitLocker, how will I know if my PC hardware is able to use it?  I ask because a few years ago I had a new (not HP) desktop with Vista Ulitmate, and when I tried to use Bitlocker, it said there was no TPM isn't installed and the manufacturer told me after the fact, that the equipment could not work with Bitlocker.  Is it possible to see if the material has a module of TPM or Bitlocker needs now?

  Thank you

  Mike

  Here are the specs of your computer from HP h8-1039 and here are the specifications of the card mother Μatx-RS880-H (Aloe) in your system. There is no mention of the TPM secure anywhere in the documentation, so it is unlikely that she supports the TPM. Also, I have a HP with a m/b Aloe and Eastern computer without TPM option secure in the BIOS and no device TPM listed in the Windows Device Manager.

  That being said, the versions of Windows 7 that support BitLocker to use a USB key to store the key BitLocker. There may be conditions and limitations associated with the use of BitLocker in this way. Please read this document from Microsoft regarding the use of BitLocker and Windows 7.

  Frank

• How to reply or start a new thread?

  Am connected, but can not find any "New message" button to be able to ask questions. What is needed other than the Member and need help? I posted more before there are two 2 years and the last in June. Seems there were a few changes I don't know and cannot circumvent this missing part for display.

  Robert is off, then I'll take it...

  You can not respond to the 'Search' page You will need to click on one of the threads highlighted blue,

  "RE: Dell Optiplex 960 TPM and Bitlocker issues."

  Will take you to the specific thread. From there, you can click the button answer.

  To start a new thread, go to the Board of Directors had need, such as general office equipment. On the right in the empty search bar, click new message.

• Lenovo X 1 Yoga (20FQ) clean Windows 10 Pro Install UEFI

  Hello

  I decided to do a clean install of Windows 10 Professional (x 64) on my Lenovo X 1 Yoga (20FQ).

  I'm currently pulling my hair out trying to install Windows 10 in UEFI mode, I want to do so that I can use all the features of the TPM and bitlocker. No matter what I do I was not able to install Windows 10 Professional (x 64) in UEFI mode, I was able to install it in legacy mode. I tried several BIOS configurations in terms of disable/enable Legacy UEFI OS at startup, but when I put the BIOS only UEFI mode the key USB Windows 10 Professional (x 64) (that I created using the file .iso image downloaded with Microsoft download tool), the machine refuses to boot from the USB or PCIe-NVMe UEFI in mode only.

  Can someone point me to a guide to install Windows to UEFI mode?

  I'm sure to UEFI, the file system must be FAT32 not NTFS.

  It may seem strange for NTFS works with 'legacy', but not UEFI - but I think that FAT32 is now considered a 'standard' and integrated with UEFI while NTFS is still proprietary format of Ms...

• T420 (and others?) Management BIOS WMI class does not

  We deploy Windows 7 for laptops Lenovo Microsoft SCCM. We should change a few portable on any computer BIOS options, more importantly enable the TPM for Bitlocker.

  I read the BIOS Lenovo Windows Management Instrumentation Interface document and tested provided example scripts. "cscript.exe SetConfig.vbs SecurityChip Active" seems to work as expected, and so do some other settings such as disabling modem, fingerprint reader etc. Run the ListAll.vbs script after modifying the parameters with SetConfig.vbs prints the correct values changed, so something to be saved.

  However, after restarting the laptop, the BIOS settings are back as they used to be. The system reports even "Change Configuration, restart the computer" or something like that when it restarts, and all seems fine but... The settings just not being saved or not change does the same. After the reboot, ListAll.vbs also reported the original settings.

  Any ideas? Should not SetConfig.vbs save the settings when it applies to them?

  The problem has been verified to exist at least the T420, but we did not test other models yet so I can't tell if it's the spesific model. I think I also didn't test change a single setting, we changed a couple of them at the same time. I'll test this tomorrow, but I don't think that explains the problem either?

  Have you tried to update the BIOS to the new version?

  http://www-307.IBM.com/PC/support/site.WSS/document.do?sitestyle=Lenovo&lndocid=MIGR-77076

  http://www-307.IBM.com/PC/support/site.WSS/document.do?sitestyle=Lenovo&lndocid=MIGR-77071

  Release notes:

  Version 1.26
  UEFI: 1.26 / ECP: 1.08

  • (New) Update ROM Computrace to version 80.895.
  • (Fix) Fixed an issue where some security in the ThinkPad configuration settings could not be changed by script WMI in Windows.
  • (Fix) Fixed a problem where the computer cannot be started from the hard drive with Linux installed if there is no active partition it.
  • (Fix) Fixed a problem where the computer with large installed memory may fail regain normal functioning of the waking state.
  • (Fix) Fixed an issue where a particular adapter may not be detected.

  Looks like the second fix in this list could be linked to the problem you are experiencing.

  -gan

• EliteBook 8440w - need to reset the BIOS users/domain

  I don't have a user ID with limited access to the BIOS, I need to check the secure TPM option.

  I need to delete all users from the BIOS.

  Another problem is that the TPM module is enabled, but windows 7 is not able to use it.

  Can someone, please, especially to remove users from the BIOS

  Thank you

  Well, after much research, I found a solution for one part of the problem.

  I managed to activate the TPM for Windows7 could find to do that I had to install the following package:

  "Embedded Security for HP ProtectTools.

  Without this package, even with well configured BIOS, Windows 7 could not configure the TPM for Bitlocker module.

  If anyone knows how to clear BIOS passwords, please notify

  Thank you

• Protégé M200: Question about Vista TPM and the Bitlocker

  You want to know if I have a TPM chip to launch bitblocker on the M200 using Vista. Just call Toshiba Technical Support - the guy was totally distraught!

  If I don't have a TPM chip, then I can install it?

  Hello

  It is a good question. To my knowledge the Portege M200 does not support TPM but the Portege M400, R400 module and the R200

  But the Bitlocker, which is only available on the Vista Enterprise and ultimate can also be used without the TPM chip but then some functions are not available; for example, the SecureBoot.
  Without TPM only the OS volume encryption is available.
  In this case you can encrypts the entire Windows volume including both data and file system user, the file of hibernation, the page file and the temporary files.

  Using volume of BONE (HDD) encryption an encryption key will be generated. This key will be written to the USB and then the USB is required!

  AFAIK the Bitlocker requires 2 partitions. A partition must be created as needs at least 50 MB primary partition. I recommend a? about 1.5 GB
  The second big partition Vista can be installed.

  After the installation of Vista the Bitlocker must be enabled in Group Policy (units without secure TPM). This can be done using the command 'gpedit '.
  And then under models of administration-> windows components-> Bitlocker bitlocker function can be activated!

  Anyway, there is much information Bitlocker and I think you should also consult the Microsoft Web site for more information:
  BitLocker Windows Drive Encryption step-by-step guide

  I hope I could help a little

• Lenovo W520 - question BitLocker TPM security tools

  Hi all, I have the following question: is it possible to use BitLocker and all the tools of Lenovo (when Client Security Solution tpm) security solution at the same time? I don't know a lot about the detailed technical background that is used by the TPM, so I think that data (login credentials) that are stored for a connection at the beginning of bitlocker, if chosen (I prefer this method not the alternative to usb), may be lost or overwritten by the tools of lenovo. Thank you chris

  Yes, by using both not effect either.

• Store keys BitLocker in AD - create TPM ACE on the ORGANIZATION Test Unit?

  Hello, we strive to make our computers store BitLocker recovery information in AD in accordance with the instructions given in these articles:

  http://TechNet.Microsoft.com/en-us/library/dd875529 (WS.10) .aspx

  http://blog.concurrency.com/infrastructure/enable-BitLocker-automatically-save-keys-to-Active-Directory/#storeinad

  One step, cited in both articles is to allow the computers to write their secure their correspondents computer objects in active directory the TPM recovery information by running the script found here

  This script seems to work in the world, I want to only operate on our group ORGANIZATIONAL unit pilot test computers. Is it possible to create these ACE on an ORGANIZATIONAL unit, and how can I do this?

  Thank you

  Hey Chauncey,

  The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums.

  http://social.technet.Microsoft.com/forums/en-us/winserverfiles/threads

• Encryption BitLocker without a TPM chip

  From: ormico

  I apoligize if this question has been asked, but I do not see when I looked on the forum and elsewhere on the web.

  I have a laptop that I was thinking together Drive Encryption on during some time.

  The options I know are PGP Whole Drive Encryption, TrueCrypt and BitLocker.

  I have Vista Ultimate and BitLocker is one of the reasons for fat that was my Ultimate, but BitLocker doesn't seem to be as straightforward as some of the other options which is a mouthful.

  My laptop doesn't have a TPM chip. As I read it, that means that the use of BitLocker, I have to use a USB key to store the key.

  Before going any further down this path, I don't know if my laptop BIOS supports a USB drive pre-seed.

  In addition, the preparation of the BitLocker driver tool could not create a partition for BitLocker. I don't know why, but my first thought is that he wants to go the paging and Hibernate files and cannot. There is a long series of instructions that I found where you can "try" to get around this problem with no guarantee that it will work.

  Then... Before I try to go this route, I was wondering if anyone could answer a few questions about BitLocker so I know if it's really what I want.

  In all the instructions I read about installing BitLocker without a TPM, the instructions always specify that you plug your usb key, boot the system, and Vista comes up. There is never a mention of a password. Is this correct? If so, all someone would need to have access to the laptop's USB key. It seems safe to me. If my laptop is stolen there is a good chance that the USB would be with her. I can try to take it with me when this is possible, but it is not always practical or likely. This isn't like a car key that I can stick in my Pocket whenever I get out of the car.

  Is it possible to use BitLocker without a TPM that uses a password? I know there are the recovery password, but a random code 48 digit is not easy to remember either.

  My preference would be to use BitLocker because I already bought it.

  PGP looks like a good option, but it's a few hundred dollars I think.

  TrueCrypt is free, but I'm a bit nervouse about using a free product to encrypt my entire hard drive. Maybe I shouldn't be biased, but if something goes wrong with this it will be painful recover. I've used TrueCrypt to create encrypted volumes before and works well, but it's a hassle to set up and dismantle all the time.

  De :  Steve Riley [MSFT]

  You have readiness tool error messages?

  Without a TPM, the only option for the storage of the key is a USB key. You don't need any special 'Pre-boot' USB support, because the computer is actually started from the small boot volume that creates the preparation tool. During this process, Windows prompts you to insert the USB key. Windows bed key root storage from there, used to decrypt another key and continues to load the operating system from disk encrypted system.

  While we support using a PIN _with_ a module of TPM, we do not support using a _without_ a TPM secure. This is because it is almost impossible to get the kind of taken entropy protect something as important as with a simple password for BitLocker volume master key. The password recovery don't, but as you note, it is almost impossible to remember such a long number.

  The metaphor of car keys is actually pretty good. You get a small USB key with a small loop so you can hang it to your keyring. Next, you will use this key to "start" on your computer. You can remove it once the computer finishes booting. You'll need whenever you start and whenever go out you this computer from hibernation (but not sleep).

  --

  Steve Riley

  E-mail address is removed from the privacy *.

  http://blogs.technet.com/steriley

  http://www.protectyourwindowsnetwork.com

  Another response of the community of Windows Vista discussion groups