04-12-2016 12:30 PM
Does the X1 Carbon with i7 processing, machine type 20BS00A5GE have the ability to AES encrypt the 512 Gb SSD by setting a BIOS password?
I wrote and called Lenovo and Samsung Support and they tell me they don't know, and do not assist customers with configuration matters. The Samsung Magican does not work with the B2B HDD like this one. Nor the manual helps me further
The manual just says about Encryption solid-state drive
Some models contain the Encryption solid-state drive. This feature helps to protect your computer againstsecurity attacks on media, NAND flash, or device controllers by use of a hardware encryption chip. For theefficient use of the encryption feature, set a hard disk password for the internal storage device.
I have set the BIOS password, but I am not sure if the data on the SSD is now AES encrypted or only the access protected by a password.
In my X1 (20BS00A5GE) there is a Samsung SM951 HD (SAMSUNG MZHPV512HDGL-000L1) Lenovo SRU: 04X4480
Or do I have to use Bit Locker tp protect my data? If so, is there a good manual how to set it up best e.g. use some security features of the HDD.
Anybody out there who knows?
Solved! Go to Solution.
04-12-2016 08:22 PM
I believe that drive in not self-encrypting/ Please note that the BIOS password is not what is used to encrypt self-encrypting. Rather it is the ATA (hard disk) password. In any case, if you set an ATA password, it is considered uncrackable. If you have a self-encrypting drive and no ATA password, the drive can simply be moved to a different machine and read directly.
04-12-2016 10:46 PM
Thanks for your advice. I have set the ATA(HDD) password in my Bios. But what I read so far, is that the ATA/HDD passwords are not secure, as long as the data is not encrypted on the HDD itself. They can be removed with special software/tools.
Seems that I have to use Bitlocker :-(
04-13-2016 05:42 AM
I can confirm that the 512GB drive does not support hardware encryption. So if you want encryption, then your only choice is software encryption like BitLocker.
If you need hardware encryption, order a model/drive that supports OPAL. OPAL is the hardware encryption standard that Lenovo uses in certain models/drives. For example, search for OPAL here: http://www.lenovo.com/psref/pdf/ThinkPad.pdf
With OPAL, the hardware encryption is activated by setting a HDD password in BIOS setup, or else using OPAL management software such as WinMagic SecureDoc.