10-15-2018 07:40 AM
I have update the x1e new bios V1.12, everything seems normal, but when i try to secrue erase ths main nvme ssd to reinstall win10, i used ThinkPad Drive Erase Utility , but i says the device is not supportted, while the BIOS v1.10 is ok.
i rollback to v1.10 it`s ok.
Maybe lenovo must update the ThinkPad Drive Erase Utility.
11-13-2018 03:10 PM
Where can I find older version of X1E BIOS? The official website only have the latest version
The older versions are still on the server. Use the current .exe link and edit per the readme to fetch the version you want.
I'm not recommending this - you're on your own...
The large print: please read the Community Participation Rules before posting. Include as much information as possible: model, machine type, operating system, and a descriptive subject line. Do not include personal information: serial number, telephone number, email address, etc.
The fine print: I do not work for, nor do I speak for Lenovo. Unsolicited private messages will be ignored - questions and answers belong in the forum so that others may contribute and benefit. ... GeezBlog
12-15-2018 11:23 AM
Same problem for me, but with a brand new ThinkPad P1.
I typically use the Drive Erase Utility provided by Lenovo to start with a blank slate and also provide some assurance I can erase the drive data securely if I need to return the laptop for defects or other issues.
I don't want to mess with downgrading/upgrading the BIOS because of horror stories I am hearing of BIOS changes bricking P1 and X1E machines.
Seems like Lenovo changed something which is causing the latest Drive Erase Utility from circa 2015 to not work on these machines.
Hoping Lenovo support admins here can respond.
03-04-2019 12:17 AM - last edited on 03-04-2019 02:57 AM by Andy_Lenovo
I just received my new laptop recently and I would like to know how to perform a secure erase (change of encryption key) on the NVme SSD that came with the laptop. A secure erase should instruct the SSD to change the encryption key stored on the SSD itself, and should be the best way to perform a full format of the data on the disk.
My preferred way to perform the Secure Erase would have been using the Bios option "Security -> Disk Encryption HDD" [R1]. However, this option was not available on my BIOS, neither on the pre-installed version (1.08) nor in the newest version (1.19). Therefore I followed the suggested option to try to activate this option in the BIOS [R2]. Afterwards the "Security -> Disk Encryption HDD" was still not visible on my BIOS menus.
I have also tried creating an USB with the Lenovo's DrvErase [R3] software. In this case I got a message from the software stating that my system or BIOS are not compatoble with DrvErase.
Using Linux, it is possible to instruct the disk to perform a secure erase by changing the encryption key [R4]. I have done this in the past and it worked. However, I am hesitant to follow this procedure on a new (and expensive) laptop. Therefore, I woule like to ask:
Q1) What is the method suggested by Lenovo to perform a Secure Erase on X1 Extreme (type: 20MG) or P1 laptops?
Note: from [R5] and [R6], I believe that P1 laptops are also affected
Q2) If I go through and instruct the SSD disk to perform an ATA Secure Erase using linux [R4], would I void lenovo's warranty?
Hoping for some answers from Lenovo,
[R1] https://support.lenovo.com/at/en/solutions/migr-69621 - Full Disk Encryption Hard Disk Drive Frequently Asked Questions
[R2] https://support.lenovo.com/at/en/downloads/ds003053 - BIOS Setup Menu Extension Utility for the Resetting the Cryptographic Key and the Erasing of the Solid State Drive for DOS - ThinkPad
[R3] https://support.lenovo.com/at/en/downloads/ds019026 - ThinkPad Drive Erase Utility for Resetting the Cryptographic Key and Erasing the Solid State Drive - ThinkPad
[R4] https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase - ATA Secure Erase
[R5] https://www.reddit.com/r/thinkpad/comments/a6hqtr/drive_erase_utility_not_supported_on_thinkpad/ - Drive Erase Utility not supported on ThinkPad P1/X1 Extreme
Admin note: post merged in subject edited, link to this topic removed
03-04-2019 11:31 AM
An additional option that I have found, but that I would need to know whether it can void Lenovo's warranty is using Parted Magic [R1][R2]. The instructions on how to issue the ATA Secure Erase command to the SSD are much simpler than using hdparm in linux (see my previous post [R4]).Many things checked by Parted Magic using the GUI are very similar to the ones that need to be done manually with hdparm [R4].
[R4] https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase - ATA Secure Erase (Linux)
03-04-2019 10:03 PM - edited 03-04-2019 10:03 PM
I have tried again running Lenovo's DrvErase [R1] software. The exact message that I get from the application is "ERROR: This machine doesn't support the Thinkpad Drive Erase Utility."
The linux application hdparm is not able to read information of the NVMe SSD disk. For example the command "hdparm -I /dev/nvme0" does not work, error message: "/dev/nvme0: HDIO_DRIVE_CMD(identify) failed: Inappropriate ioctl for device".
It is possible to read the SMART usage data from the drive using the commands "sudo smartctl -i /dev/nvme0" and "sudo smartctl -A /dev/nvme0" (in Ubuntu install the package "smartmontools").
An alternative to using hdparm to issue the ATA Secure Erase command [R2] us using the nvme-cli [R3][R4] (in Ubuntu install the package "nvme-cli").. I do not plan to test this on my hardware, unless the Lenovo support confirms that this works and does not void the warranty.
[R1] https://support.lenovo.com/at/en/downloads/ds019026 - ThinkPad Drive Erase Utility for Resetting the Cryptographic Key and Erasing the Solid State Drive - ThinkPad
[R2] https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase - ATA Secure Erase
[R3] https://manpages.debian.org/stretch/nvme-cli/index.html - nvme-cli
[R4] https://manpages.debian.org/testing/nvme-cli/nvme-format.1.en.html - nvme-cli format