ThinkPad stores various UEFI BIOS settings in its nonvolatile memory like Flash or EEPROM. These settings are configured by using the ThinkPad Setup menu. In general, this is done manually by the user. However, from a deployment point of view, the ThinkPad Setup settings are expected to be common to all machines and to be controlled remotely.
This software is a DOS application for this purpose.
Features:
Copy UEFI BIOS setup data settings
Copy UEFI BIOS secure data settings
Install and update for power-on password
Install for hard disk password
Copy supervisor password.
To use this software, a bootable and read/write-able media (floppy disk, USB memory, CD-RW, etc.) with DOS or Windows 95/98 boot disk installed, and also a device for the media (floppy disk drive, USB port, CD-RW drive, etc.) are necessary.
If this software has been used, updating this software will fix problems, add new functions, or expand functions as noted below.
This program is language independent and can be used with any language system.
(New) Added special option for Manufucturing support.
Version 1.09
(New) Added support for ThinkPad X1 Carbon.
Version 1.07
(New) Added support for ThinkPad L430, L530, T430, T430i, T430s, T430si, T530, T530i, W530, X230, X230i, X230 Tablet, X230i Tablet.
Version 1.05
(Fix) Corrected this readme document to add support for ThinkPad X120e in version 1.03.
(Fix) Fixed an issue where the hard disk password could not be set in the second internal hard disk or later.
Note: Please refer to the README file under the "File details" section for a complete list of changes fixed by this driver update.
Notes
Both the donor ThinkPad and a target ThinkPad must have the same UEFI BIOS Level.
How to use software
Note:
If your computer runs satisfactorily now, it may not be necessary to update the software. To determine if you should update the software, refer to the Version Information section.
A bootable and read/write-able media (floppy disk, USB memory, CD-RW, etc.) with DOS or Windows 95/98 boot disk installed, and also a device for the media (floppy disk drive, USB port, CD-RW drive, etc.) are necessary.
Capturing BIOS Settings
Do the following procedures at a donor ThinkPad:
Setting up a donor ThinkPad
Turn off the computer.
Turn on the computer.
While the following messages is displayed at the lower-left area of the screen, press the F1 key. "To interrupt normal startup, press the blue ThinkVantage button" The ThinkPad Setup menu will be displayed. If a password prompt appears, type the correct password.
Change and save the desired settings as required.
Exit from the ThinkPad Setup and restart the computer.
Ensure that the donor ThinkPad starts up and functions properly.
Starting capture
Copy SRSETUP.EXE into a bootable and read/write-able media with DOS or Windows 95/98 boot disk installed.
Insert the media in its device, then power on and boot the computer with the media.
At the command line, execute SRSETUP.EXE with the /c option. Example: SRSETUP.EXE \path\file_name /c Where \path\file_name is the path and file name of ThinkPad Setup Settings file to be created.
Capture options
WARNING: This process creates an intermediate file that contains the power-on password, hard disk password and a pointer to the system that these passwords are intended to be installed on. Be sure to treat this intermediate file as a potential security exposure that exists until the reset process is complete. Be sure to transmit the file securely to the target system and to destroy the file when finished. Examples of secure transmission include carrying the file on removable media to the target system or encrypting the file before transmission over the network to the target system.
[Secure data and Supervisor password]
SRSETUP can captureUEFI BIOS secure data that includes a supervisor password. The captured data has an encrypted supervisor password of the donor ThinkPad. To capture the supervisor password, add the /kpap option to enter the password by the keyboard. Example: SRSETUP.EXE \path\file_name /c /kpap
[UIA (User Information Area) Data]
To save UIA data, add the /UIA option. Example: SRSETUP.EXE \path\file_name /c /UIA You can't use the /e option with the /UIA command at the target ThinkPad computers.
[Power-on password and Hard disk password]
SRSETUP can deploy power-on password and hard disk password. To set the power-on password and hard disk password at the target ThinkPad computers, create a password.txt file (any name), add the /EP password.txt options. Example: SRSETUP.EXE \path\file_name /c /EP password.txt Where password.txt contains the names of UEFI BIOS settings files for each of target ThinkPad computers, the power-on password and the hard disk password. "Sample.txt" shows the format of .csv file.
If the supervisor password is set on a donor ThinkPad, add the /kpap option to enter the password by the keyboard. Example: SRSETUP.EXE \path\file_name /c /kpap /EP password.txt In this case, the BIOS Settings file contains a supervisor password.
Playing Back BIOS Settings
Do the following procedures at a target ThinkPad:
Starting Playback
Notes:
[Secure data and Supervisor password]
If the target computer already has a supervisor password, add the /kpap option to enter the supervisor password by keyboard: Example: SRSETUP.EXE \path\file_name /u /kpap
[Power-on password and Hard disk password]
If the target computer already has a power-on password and/or a hard disk password, you can not set the passwords by SRSETUP. You must remove the passwords by ThinkPad Setup Utility at the target computer.
Copy the ThinkPad Setup Settings file in the step 9 of the "Capturing ThinkPad Setup Settings" section into the media in the step 7, as well.
Insert the media in its device, then power on and boot the computer with the media.
At the command line, execute SRSETUP.EXE with the /u option. Example: SRSETUP.EXE \path\file_name /u Where \path\file_name is the path and file name of ThinkPad Setup Settings file.
The computer restarts automatically. After restart, the computer will shut down automatically at ThinkPad logo screen.
Determining which version is installed
Run SRSETUP.EXE with no parameter at the DOS command prompt. Version information is displayed on the screen.