Clearing the TPM chip?

Discussion in 'Lenovo' started by LoneWolf15, Mar 12, 2008.

Thread Status:
Not open for further replies.
  1. LoneWolf15

    LoneWolf15 The Chairman

    Reputations:
    971
    Messages:
    1,537
    Likes Received:
    0
    Trophy Points:
    55
    Hi guys,

    I'm experiencing the problem some others have of my ThinkVantage security software not wanting to enroll once I've gone back from Vista to XP.

    I've read all of the explanation of what to do to fix this; I'm supposed follow these instructions according to Lenovo:

    To clear the TPM from the BIOS, do the following:

    1. Turn the computer off.
    2. Turn the computer on and press F1 to enter the BIOS setup menu.
    3. From the Security menu, locate the option to clear the security device. Sometimes it is referred to as the TPM or TCG feature.
    4. Save and exit the BIOS setup menu.
    5. Restart Windows and enroll in Client Security Solution.

    The process should complete successfully. Contact Lenovo technical support if the problem persists.


    Fine, no problem. However, when I get into the Security menu, for the life of me, I cannot find the option to clear the device. There is the option to disable the security chip, or make it inactive but visible to the OS, or enabled --there is no option telling me to clear it. I've gone in and cleared the fingerprint database (which doesn't appear to do anything, Windows XP still remembers my fingerprints on next boot), and I've disabled, then reenabled the security chip. I've also updated the Security Center software to the latest 8.1 and made sure I have the latest BIOS for my T61. However, if I leave the Security chip enabled, I still cannot enroll in the security software.

    Interestingly enough, if I disable the security chip, fingerprint reading still works in Windows, the remaining security center software just doesn't run. However, I'd like to reenable the chip, and get this fixed. Does anyone know exactly which option resets the TPM, which menu to go to, and what wording? Maybe I'm just blind --if so, someone please help me see.
     
  2. ra990

    ra990 Notebook Consultant

    Reputations:
    13
    Messages:
    281
    Likes Received:
    0
    Trophy Points:
    30
    I think there is a download for this in the T61 download area on Lenovo's website. I recall coming across something with the description of add option to clear TPM cryptography key.
     
  3. LoneWolf15

    LoneWolf15 The Chairman

    Reputations:
    971
    Messages:
    1,537
    Likes Received:
    0
    Trophy Points:
    55
    Update:

    I found some advice here:

    http://forums.lenovo.com/lnv/board/message?board.id=X_Series_Thinkpads&thread.id=305

    I followed this user's instructions, and was given an option to clear encryption keys in my T61's BIOS under the Security Chip settings. However, I still cannot be enrolled in the Client Security Solution.

    I'm wondering if the key to all of this is my having my system joined to a network domain and that I'm logged in as a domain user. I've given my domain user account local administrator privileges, but that hasn't fixed things either.
     
  4. LoneWolf15

    LoneWolf15 The Chairman

    Reputations:
    971
    Messages:
    1,537
    Likes Received:
    0
    Trophy Points:
    55
    Final post --I went back in, reset the settings to default (F9), and cleared the Security Chip encryption keys -twice. This time, it worked. Don't know why it did this time when it didn't before.

    Close this one out.
     
  5. vitorccs

    vitorccs Newbie

    Reputations:
    0
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    5
    I had the same problem and following the steps below worked fine for me!!!

    1.) Shutdown the computer
    2.) Hold down F1 (while computer is off)
    3.) Continue holding F1 and power on the computer.
    4.) When the boot screen says that's in entering the bios, release the F1 key.
    5.) Go under Security, Security Chip, and Choose to clear the encryption.
     
  6. Rich.Carpenter

    Rich.Carpenter Cranky Bastage

    Reputations:
    91
    Messages:
    903
    Likes Received:
    0
    Trophy Points:
    30
    Doesn't this kind of defeat the purpose of TPM? I mean, if someone could steal your notebook and just clear the TPM info, what's the point?
     
  7. LoneWolf15

    LoneWolf15 The Chairman

    Reputations:
    971
    Messages:
    1,537
    Likes Received:
    0
    Trophy Points:
    55
    That is why you password-protect the BIOS setup so that no-one but you can clear the TPM chip.
     
  8. Takuya

    Takuya Newbie

    Reputations:
    0
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    5
    Hello, i got the problem with my Z60m that i can still boot up and enter bios with my fingerprint, but can't resolve the password anymore and if I put the drive in an other laptop, it wants a hard disk password.

    If I clear the TPM chip data, do I automatically remove the hard disk password or do I lock out myself through deleting my fingerprint data?
     
  9. lead_org

    lead_org Purveyor of Truth

    Reputations:
    1,571
    Messages:
    8,107
    Likes Received:
    123
    Trophy Points:
    231
    If do that then it would constantly ask for a password, which you don't have.
     
  10. Takuya

    Takuya Newbie

    Reputations:
    0
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    5
    Okey, thats bad.
    Thanks for your answer.
     

Thread Status:
Not open for further replies.

Share This Page