English Community

ThinkPad NotebooksThinkPad: P and W Series Mobile Workstations
All Forum Topics
Options

6 Posts

03-19-2016

SW Florida

20 Signins

163 Page Views

  • Posts: 6
  • Registered: ‎03-19-2016
  • Location: SW Florida
  • Views: 163
  • Message 1 of 34

Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-03-21, 13:34 PM

Self-encrypting SSDs such as the Samsung 950 Pro M.2 PCIe-NVMe as well as other 2.5" formats allow for a password for drive encryption to be enabled from within the BIOS. There seems to be a problem with enabling that function with the 950 Pro. Another forum member has a P70 with a 950 Pro as the boot-drive and a Samsung 850 2.5" SSD as a data-drive. When in the BIOS to enable HDD (SDD) password(s) the 850 is listed while the 950 is not. According to Samsung, the 950 Pro has "AES 256-bit for user data encryption". Has anyone been able to enable the HDD (SDD) drive-encryption password of a Samsung 950 Pro OR any of the Lenovo furnished PCIe-NVMe M.2 drives within their BIOS settings? Of note, once enabled, upon start-up the BIOS will ask for the password of each drive with a password enabled before proceeding to the OS. Lack of this capability within the P70 for a PCIe-NVMe M.2 SSD in the 512GB capacity range is a deal-breaker for the P70 that I would like to order.

 

Any thoughts or suggestions pertaining to this matter would be greatly appreciated.

Reply
Options

25 Posts

03-11-2016

europe

52 Signins

718 Page Views

  • Posts: 25
  • Registered: ‎03-11-2016
  • Location: europe
  • Views: 718
  • Message 2 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-03-21, 14:00 PM

it is about samsung 950 pro

 

for some reason only 256gb version supports OPAL

 

more info in that thread

https://forums.lenovo.com/t5/ThinkPad-P-and-W-Series-Mobile/Thinpad-P50-Samsung-950-pro-and-password-security/m-p/3269228/highlight/true#M56840

Reply
Options

6 Posts

03-19-2016

SW Florida

20 Signins

163 Page Views

  • Posts: 6
  • Registered: ‎03-19-2016
  • Location: SW Florida
  • Views: 163
  • Message 3 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-03-22, 0:59 AM

Can anyone confirm that a self-encrypting PCIe-NVMe M.2 SSD WITH Opal is able to have its password set in the P70 BIOS and if so, is Opal the reason that the Samsung 950 won't?

 

Thank you.

Reply
Options

6516 Posts

10-29-2009

NC

17653 Signins

162093 Page Views

  • Posts: 6516
  • Registered: ‎10-29-2009
  • Location: NC
  • Views: 162093
  • Message 4 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-03-23, 17:40 PM

With the Samsung SM951 NVMe/OPAL SSD that Lenovo ships with P70, it is possible to set a HDD password in BIOS Setup.  I can't comment on Samsung 950 Pro because Lenovo doesn't ship that.

 

Possible reasons why HDD password option is missing in BIOS:

  1. The drive doesn't support ATA security
  2. The drive has the OPAL (or eDrive) feature enabled and activated

Have you tried running Samsung Magician?  Look in the Data Security tab (under "Advanced Feature") and check what security modes are available/enabled for your drive.

Reply
Options

25 Posts

03-11-2016

europe

52 Signins

718 Page Views

  • Posts: 25
  • Registered: ‎03-11-2016
  • Location: europe
  • Views: 718
  • Message 5 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-03-23, 18:02 PM

but even with the Samsung SM951 NVMe only the 256gb version have at this time encryption feature [OPAL]

with the samsung 950 pro is the same

the 256gb version have the ability to set the on-pass

only the 512gb version at that moment do not have this feature operational

but if You try to set bitlocker it uses the hardware encryption biult in samsung 950 pro 

 

Reply
Options

551 Posts

10-03-2011

CA

2890 Signins

14755 Page Views

  • Posts: 551
  • Registered: ‎10-03-2011
  • Location: CA
  • Views: 14755
  • Message 6 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-03-24, 14:28 PM

wrote:

if You try to set bitlocker it uses the hardware encryption biult in samsung 950 pro 

 


I don't think Bitlocker can do that, if the drive isn't eDrive friendly (which 950 isn't at the moment, until the promised firmware update).

 

Not that using CPU for encryption makes any noticeable difference performance wise on modern quad core CPUs. 

Reply
Options

9 Posts

05-13-2016

US

17 Signins

101 Page Views

  • Posts: 9
  • Registered: ‎05-13-2016
  • Location: US
  • Views: 101
  • Message 7 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-05-22, 23:29 PM

I'm also want to know it: does thinkpad p50 need to use OPAL to implement a bootup password for a NVMe HDD?

 

When you setup the 256GB NVMe bootup password, does the bios showing  you something like "OPAL 2.0" on the screen?

Reply
Options

6516 Posts

10-29-2009

NC

17653 Signins

162093 Page Views

  • Posts: 6516
  • Registered: ‎10-29-2009
  • Location: NC
  • Views: 162093
  • Message 8 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-05-23, 13:48 PM

wrote:

I'm also want to know it: does thinkpad p50 need to use OPAL to implement a bootup password for a NVMe HDD?


No, you can set a BIOS password and get the exact same encryption as if you use OPAL management software.

 


asbai wrote:

When you setup the 256GB NVMe bootup password, does the bios showing  you something like "OPAL 2.0" on the screen?


No, it shows you a screen to enter the HDD password, but it doesn't say anything about OPAL on this screen.

Reply
Options

9 Posts

05-13-2016

US

17 Signins

101 Page Views

  • Posts: 9
  • Registered: ‎05-13-2016
  • Location: US
  • Views: 101
  • Message 9 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-05-23, 19:08 PM

From samsung, OPAL and eDrive not supportted by 950pro yet (http://www.samsung.com/global/business/semiconductor/minisite/SSD/downloads/document/Samsung_SSD_950_PRO_Data_Sheet_rev_11.pdf). But class 0 bios hdd password has been supportted by 950 pro now.

 

If the bios don't need OPAL for a NVMe hdd password, we should see it anyway (for both 256GB and 512GB disks). But we can't see it on 512GB version now ? :-(

Reply
Options

6516 Posts

10-29-2009

NC

17653 Signins

162093 Page Views

  • Posts: 6516
  • Registered: ‎10-29-2009
  • Location: NC
  • Views: 162093
  • Message 10 of 34

Re: Self-Encrypting PCIe-NVMe M.2 SSD Password in the BIOS of a P70??

2016-05-23, 19:11 PM

Sorry, I should have clarified that all my comments are about the SSDs that Lenovo ships.  Lenovo has a spec about how our SSDs should work, and our suppliers are required to adhere to it (and we test for it).  If you are buying a SSD from somewhere else and installing it yourself, I have no idea how it works.  You'll have to ask your supplier about that.

Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete