ThinkPad June 29, 2007 BIOS Settings Capture/Playback Utility Version 3.35 ====================================================================== What This Program Does ----------------------- This program updates the ThinkPad BIOS Setup data with removable media. The following models are supported: - ThinkPad A30, A30p - ThinkPad A31, A31p - ThinkPad G40, G41 - ThinkPad R31, R32 - ThinkPad R40, R40e - ThinkPad R50, R50e, R50p, R51, R51e, R52 - ThinkPad R60, R60e, R61, R61e - ThinkPad T30 - ThinkPad T40, T40p, T41, T41p, T42, T42p, T43, T43p - ThinkPad T60, T60p, T61, T61p - ThinkPad X30, X31, X32 - ThinkPad X40, X41, X41 Tablet - ThinkPad X60, X60s, X60 Tablet - ThinkPad X61, X61s, X61 Tablet - ThinkPad Z60m, Z60t, Z61e, Z61m, Z61p, Z61t - ThinkPad Reserve Edition To determine if you have to update this program or not, refer to the "Summary of Changes" section. Released Versions ----------------- Version 3.05 03/05/2002, Initial release Version 3.07 05/24/2002 Version 3.10 06/25/2002 Version 3.11 08/06/2002 Version 3.14 01/09/2003 Version 3.15 02/18/2003 Version 3.22 09/08/2003 Version 3.23 03/16/2004 Version 3.24 04/28/2004 Version 3.27 09/27/2004 Version 3.28 01/25/2005 Version 3.30 05/24/2005 Version 3.31 09/01/2005 Version 3.32 04/24/2006 Version 3.33 06/28/2006 Version 3.34 09/22/2006 Version 3.35 07/03/2007 Summary of Changes ------------------ Where: Diskette version (for example, 1.00 means Version 1.00) (New) New function or enhancement (Fix) Correction to existing function <3.35> -(New) Support for ThinkPad T61, T61p, R61, R61e, X61, X61s, X61 Tablet, ThinkPad Reserve Edition <3.34> -(New) Support for ThinkPad X60 Tablet -(New) Security feature update <3.33> -(New) Support for ThinkPad Z61p <3.32> -(New) Support for ThinkPad T60, T60p, X60, X60s, R60, R60e, Z61e, Z61m, Z61t <3.31> -(New) Support for ThinkPad Z60t, Z60m, R51e <3.30> -(New) Support for ThinkPad X41 Tablet <3.28> -(New) Support for ThinkPad T43, T43p, R52, X32, X41 <3.27> -(New) Support for ThinkPad G41 <3.24> -(New) Support for ThinkPad T42, T42p <3.23> -(New) Support for ThinkPad R51, R50e <3.22> -(New) Support for ThinkPad R50, R50p, T41, T41p, X40 -(New) Support for distribution of Power on Password, Hard disk drive Password by diskette -(New) Support for distribution of UIA data. <3.15> -(New) Support for ThinkPad R40e, T40, T40p, X31, G40 <3.14> -(New) Support for ThinkPad R40 <3.11> -(New) Support for ThinkPad X30 -(New) Support for Distribution of supervisor password <3.10> -(New) Support for ThinkPad A30, A30p -(New) Support for secure data read/write. <3.07> -(New) Support for ThinkPad T30, R32 <3.05> -(New) Support for ThinkPad A31, A31p, R31 How to determine what version is used ------------------------------------- Run SRCMOS.EXE with no parameters. The version information is displayed on the screen. How to use ---------- Creating a CMOS Settings Image 1. At a donor workstation: 1-1. Start up the workstation and access the BIOS Setup. (Press the F1 key during the power-on self-test (POST)) 1-2. Change and save the desired settings as required. 1-3. Exit from the BIOS Setup program and restart the workstation. Ensure that the workstation starts up and functions properly. 2. Rename the SRCMOS.EXE to 'SRCMOS' + 'xx' + '.EXE' (refer to the table below to rename the program name.) xx: BIOS identifier (two characters) How to get BIOS identifier 1. Start up the workstation and access the BIOS Setup. 2. The following two characters 'XX' of BIOS Version is BIOS identifier. BIOS Version 0.00a (XXETaaWW) 3. Use the SRCMOS.EXE program to save the current settings of the donor workstation to a file. 3-1. Insert a DOS or Win9x boot diskette in the A drive. 3-2. Power on the system. 3-3. When the logo screen appears, press the Esc key. The screen mode will change to the text mode. Note: This step is not required for the following systems: Thinkpad T60, T60p, T61, T61p, R60, R60e, R61, R61e, X60, X60s, X60 Tablet, X61, X61s, X61 Tablet, G50, Z61e, Z61m, Z61p, Z61t, Thinkpad Reserve Edition ) 3-4. Execute the SRCMOSxx.exe with the correct parameters: > SRCMOSxx \path\file_name /c If the donor system has a supervisor password: (This option is not applicable for ThinkPad R31) > SRCMOSxx \path\file_name.cms /kpap Password prompt will appear. Type correct password and press enter. Note: If you capture the data of the system that have supervisor password, The captured data has an encrypted supervisor password of the donor system. Please refer to the "Note for ThinkPad A30, A30p,..." for detailed information. 4. Create CMOS Update image For RDM version 4.1 or newer, 4-1. Prepare BIOS Update diskette or bootable CD for target system. Note. For Bootable CD, use CD-RW media. 4-2. Copy SRCMOSxx.EXE into the BIOS diskette or the CD-RW. 4-3. Create a Firmware Flash image of the BIOS Update media. (Using the Image management menu click Tasks, then click Remote Deployment Manager.) 4-4. Copy the CMOS setting file into the appropriate directory on the RDM server. 4-5. Create a CMOS setting image on RDM server. (Using Image management menu from [Tasks] -> [Remote Deployment Manager]) Select the CMOS setting file name in "Enter CMOS Clone file" field. For RDM version 3.2 or earlier, 4-1. Copy SRCMOSxx.EXE and the .CMS file to the corresponding BIOS directory on your server which is named: C:\RDM_install_dir\BIOS\Flash_BIOS_Name where the 'Flash_BIOS_Name' directory is the name of the BIOS level on your donor workstation (unless this was changed by the system administrator during the Read BIOS Flash diskette process). Note: When you are not able to get the BIOS update diskette using RDM version 3.2 or earlier: You can store CMOS setting files and SRCMOSxx.EXE using the following steps. a. Check the "Current BIOS Level" of the Maintenance page of the Individual Client Details notebook. b. Create the directory under the \RDM_install_dir\BIOS which has the same name of the "Current BIOS Level". For example, if the "Current BIOS Level" is IBUJ01WW, the required directory is: \RDM_installed_dir\BIOS\IBUJ01WW c. Copy SRCMOSxx.EXE and the .CMS file to the above directory. You must uncheck the "Update BIOS" check box of the Maintenance page. (Check the "Update CMOS with file" check box only) --------------------------------------------------------------------- | Product name | BIOS level name | SRCMOS.EXE | | | (Flash_BIOS_Name) | program name | |-------------------------|--------------------|----------------------| | ThinkPad A30, A30p | 1EUJaabb | SRCMOS1E.EXE | | ThinkPad A31, A31p | 1GUJaabb | SRCMOS1G.EXE | | ThinkPad A31, A31p | 1NUJaabb | SRCMOS1G.EXE | | ThinkPad G40 | 1TUJaabb | SRCMOS1T.EXE | | ThinkPad G41 | 1XUJaabb | SRCMOS1X.EXE | | ThinkPad R31 | 1FUJaabb | SRCMOS1F.EXE | | ThinkPad R32 | 1MUJaabb | SRCMOS1M.EXE | | ThinkPad R40 (*1) | 1OUJaabb | SRCMOS1O.EXE | | ThinkPad R40 (*2) | 1PUJaabb | SRCMOS1P.EXE | | ThinkPad R40e | 1SUJaabb | SRCMOS1S.EXE | | ThinkPad T30 | 1IUJaabb | SRCMOS1I.EXE | | ThinkPad T40, T40p, T41,| 1RUJaabb | SRCMOS1R.EXE | | T41p, T42, T42p,| | | | R50, R50p | | | | ThinkPad R51 (*3) | 1RUJaabb | SRCMOS1R.EXE | | ThinkPad R51 (*4) | 1VUJaabb | SRCMOS1V.EXE | | ThinkPad T43 (*5) | 1YUJaabb | SRCMOS1Y.EXE | | ThinkPad T43 (*6) | 70UJaabb | SRCMOS70.EXE | | ThinkPad T43p | 1YUJaabb | SRCMOS1Y.EXE | | ThinkPad R52 (*7) | 70UJaabb | SRCMOS70.EXE | | ThinkPad R52 (*8) | 76UJaabb | SRCMOS76.EXE | | ThinkPad R50e | 1WUJaabb | SRCOMS1W.EXE | | ThinkPad X30 | 1KUJaabb | SRCMOS1K.EXE | | ThinkPad X31, X32 | 1QUJaabb | SRCMOS1Q.EXE | | ThinkPad X40, X41 | 1UUJaabb | SRCMOS1U.EXE | | ThinkPad X41 Tablet | 75UJaabb | SRCMOS75.EXE | | ThinkPad Z60m, Z60t | 77UJaabb | SRCMOS77.EXE | | ThinkPad R51e | 78UJaabb | SRCMOS78.EXE | | ThinkPad T60, T60p | 79UJaabb | SRCMOS79.EXE | | ThinkPad T61 | 7LUJaabb | SRCMOS7L.EXE | | ThinkPad X60, X60s | 7BUJaabb | SRCMOS7B.EXE | | ThinkPad R60e | 7EUJaabb | SRCMOS7E.EXE | | ThinkPad R60 | 7CUJaabb | SRCMOS7C.EXE | | ThinkPad R61 14.1 inch | 7LUJaabb | SRCMOS7L.EXE | | widescreen with IEEE | | | | 1394 (*9) | | | | ThinkPad R61 14.1 inch | 7KUJaabb | SRCMOS7K.EXE | | widescreen without IEEE | | | | 1394 (*10) | | | | ThinkPad Z61e, Z61m, | 7FUJaabb | SRCMOS7F.EXE | | Z61p, Z61t | | | | ThinkPad X60 Tablet | 7JUJaabb | SRCMOS7J.EXE | --------------------------------------------------------------------- aa: version, bb: country code Machine types/models: (*1) 2681, 2682, 2683 (*2) 2722, 2723, 2724 (*3) 1829, 1830, 1831, 1836, 1840, 1841 (*4) 2887, 2888, 2889, 2894, 2895, 2883 (*5) 2668, 2669, 2678, 2679, 2686, 2687 (*6) 1871, 1872 ,1873, 1874, 1875, 1876 (*7) 1858, 1859, 1860, 1861, 1862, 1863 (*8) 1846, 1847, 1848, 1849, 1850, 1870 (*9) 7732-11x, 12x, 14x, 1Ex, 1Fx, 4Ax, 4Bx, 4Cx, 4Dx, 4Ex, 4Fx, 4Gx, 4Hx, 4Jx, 4Kx, 4Nx, X2x, X3x, X6x 7733-12x, 13x, 14x, 15x, 16x, 17x, 1Bx, 1Cx, 1Dx, 1Ex, XAx 7735-12x, 1Bx, 1Cx, 1Dx, 1Ex, XAx 7738-16x, 17x, 18x, 19x, 1Bx, 1Cx 7742-11x, 12x, 16x, 4Lx, 4Mx, X1x, X7x 7743-11x, 12x, 13x, 14x, 15x, 17x, 18x, 19x, 1Gx, 1Hx, 1Jx 7751-11x, 12x, 13x, 1Gx, 1Hx, 1Jx 7753-2XU 7754-2XU 7755-11x, 12x, 13x, 14x, 15x, 16x, 17x, 1Bx (*10) 7732-13x, 15x, 18x, 19x, 1Ax, X9x 7733-11x, 18x, 1Ax, 1Gx 7735-11x, 13x, 14x, 1Gx 7736-1XU 7737-1XU 7738 11x, 1Ax, 1Gx Power on password and hard disk password distribution: ------------------------------------------------------ Note: (This note is not applicable for ThinkPad R31. Please see the note for ThinkPad R31 below.) From Ver3.22, SRCMOS can distribute Power on Password and Harddisk Password by diskette. To Use This Function, you must use following level of BIOS. From Ver3.22, SRCMOS has the ability to create a capture image with an embedded Power on Password and Harddisk Password. Please follow the process outlined below in order to securely embed and distribute a CMOS settings image which includes Power on Password and Harddisk Password. To use this Function, refer to the table below for BIOS level information. BIOS level supporting Secure data and Password distribution ------------------------------------------------------------------- | Product name | Secure Data | Power on Password | | | Supervisor Password| Hard disk Password | | | Distribution | Distribution | |-------------------------|--------------------|--------------------| | ThinkPad A30, A30p | 1EET54WW or later | (No support) | | ThinkPad A31, A31p | 1GET29WW or later | (No support) | | ThinkPad T30 | 1IET27WW or later | (No support) | | ThinkPad R31 | (Not support) | (No support) | | ThinkPad R32 | 1MET55WW or later | (No support) | | ThinkPad T40, T40p | (All BIOS support) | 1RET68WW or later | | ThinkPad T41, T41p | (All BIOS support) | (All BIOS support) | | ThinkPad T42, T42p | (All BIOS support) | (All BIOS support) | | ThinkPad T43, T43p | (All BIOS support) | (All BIOS support) | | ThinkPad T60, T60p | (All BIOS support) | (All BIOS support) | | ThinkPad T61 | (All BIOS support) | (All BIOS support) | | ThinkPad R40, R40e | (All BIOS support) | (No support) | | ThinkPad R50, R50p, R50e| (All BIOS support) | (All BIOS support) | | ThinkPad R51, R51e, R52 | (All BIOS support) | (All BIOS support) | | ThinkPad X30, | (All BIOS support) | (No support) | | ThinkPad X31, X32 | (All BIOS support) | 1QET61WW or later | | ThinkPad X40, X41 | (All BIOS support) | (All BIOS support) | | ThinkPad X41 Tablet | (All BIOS support) | (All BIOS support) | | ThinkPad X60, X60s | (All BIOS support) | (All BIOS support) | | ThinkPad G40 | (All BIOS support) | (No support) | | ThinkPad G41 | (All BIOS support) | (All BIOS support) | | ThinkPad Z60m, Z60t | 1MET55WW or later | (All BIOS support) | | ThinkPad R60, R60e | (All BIOS support) | (All BIOS support) | | ThinkPad R61 | (All BIOS support) | (All BIOS support) | | ThinkPad Z61e, Z61m, | (All BIOS support) | (All BIOS support) | | Z61p, Z61t | | | | ThinkPad X60 Tablet | (All BIOS support) | (All BIOS support) | -------------------------------------------------------------------- Secure data supervisor password distribution: --------------------------------------------- 1. Creating data file that contains the password on donor system WARNING: this process creates an intermediate .cms file that contains the Power on Password, Hard disk drive Password and a pointer to the system that these passwords are intended to be installed on. Please be sure to treat this intermediate file as a potential security exposure that exists until the reset process is complete. Be sure to transmit the file securely to the target system and to destroy the file when finished. Examples of secure transmission include carrying the file on removable media to the target system or encrypting the file before transmission over a network to the target system. a. Follow "How to Use - Creating a CMOS Settings Image" above and proceed to 3-c. b. Execute SRCMOS.exe with correct parameters: > SRCMOSxx \path\file_name.CMS /c /EP password.csv where password.csv contain the Power on Password and the Hard disk drive Password, and the filename of the .CMS file for each of the target systems. "Sample.txt" shows the format of .CSV file. *1) If the supervisor password is set on a donor system, you must the command line option "/kpap" to enter the password by the keyboard: > SRCMOSxx \path\file_name.CMS /c /KPAP /EP password.csv ~~~~~ In this case, .CMS file contain a supervisor password 2. Distributing data file to target systems by diskette 1. Copy the .CMS files and SRCMOS to boot diskette. 2. Boot the target system by this diskette and run SRCMOS: > SRCMOSxx \path\file_name.CMS /u 3. System restarts automatically. After restart, system shutdown automatically at ThinkPad logo screen. *1) If the target system already has a power on password or hard disk drive password, you can not set the passwords by SRCMOS. You must remove the passwords by BIOS Setup. *2) If the target system already has a supervisor password, you must use a command line option "/KPAP" to enter the supervisor password by keyboard: > SRCMOSxx \path\file_name.CMS /u /KPAP 3. From Ver3.22, SRCMOS can read/write UIA data. To save UIA data to .CMS file, use command line option "/UIA". If .CMS file contain UIA data, SRCMOS set the data to target system. 4. From version 3.10, SRCMOS can read/write bios secure data except for Power on Password and Hard disk drive Password. To use this Function, refer to the table below for BIOS level information. BIOS level supporting Secure data and Password distribution ------------------------------------------------------------------- | Product name | Secure Data | Power on Password | | | Supervisor Password| Hard disk Password | | | Distribution | Distribution | |-------------------------|--------------------|--------------------| | ThinkPad A30, A30p | 1EET54WW or later | (No support) | | ThinkPad A31, A31p | 1GET29WW or later | (No support) | | ThinkPad G40 | (All BIOS support) | (No support) | | ThinkPad G41 | (All BIOS support) | (All BIOS support) | | ThinkPad R31 | (No support) | (No support) | | ThinkPad R32 | 1MET55WW or later | (No support) | | ThinkPad R40, R40e | (All BIOS support) | (No support) | | ThinkPad R50, R50p, R50e| (All BIOS support) | (All BIOS support) | | ThinkPad R51, R51e, R52 | (All BIOS support) | (All BIOS support) | | ThinkPad R60, R60e | (All BIOS support) | (All BIOS support) | | ThinkPad R61, R61e | (All BIOS support) | (All BIOS support) | | ThinkPad T30 | 1IET27WW or later | (No support) | | ThinkPad T40, T40p | (All BIOS support) | 1RET68WW or later | | ThinkPad T41, T41p | (All BIOS support) | (All BIOS support) | | ThinkPad T42, T42p | (All BIOS support) | (All BIOS support) | | ThinkPad T43, T43p | (All BIOS support) | (All BIOS support) | | ThinkPad T60, T60p | (All BIOS support) | (All BIOS support) | | ThinkPad T61, T61p | (All BIOS support) | (All BIOS support) | | ThinkPad X30, | (All BIOS support) | (No support) | | ThinkPad X31, X32 | (All BIOS support) | 1QET61WW or later | | ThinkPad X40, X41 | (All BIOS support) | (All BIOS support) | | ThinkPad X41 Tablet | (All BIOS support) | (All BIOS support) | | ThinkPad X60, X60s | (All BIOS support) | (All BIOS support) | | ThinkPad X61, X61s | (All BIOS support) | (All BIOS support) | | ThinkPad X60 Tablet | (All BIOS support) | (All BIOS support) | | ThinkPad X61 Tablet | (All BIOS support) | (All BIOS support) | | ThinkPad Z60m, Z60t | 1MET55WW or later | (All BIOS support) | | ThinkPad Z61e, Z61m, | (All BIOS support) | (All BIOS support) | | Z61p, Z61t | | | | ThinkPad Reserve Edition| (All BIOS support) | (All BIOS support) | -------------------------------------------------------------------- If you use a former version of BIOS than above, you must use "/E" option when capturing donor settings. Example: srcmos.exe config.cms /c /e If you use /e option, SRCMOS will not attempt to read secure data. (You have not to use /e option at update target system.) 5. From Version 3.11, SRCMOS can support a) distribution of the supervisor password, and b) distribution of cmos data to the target systems that have a supervisor password. To use these features, you must apply "RDM 3.1.01 Patch 1" to your RDM system. a) Distribute supervisor password from donor to targets. If the donor system has a supervisor password, the captured data file (.cms file) from the system contains an encrypted supervisor password of the donor system. If you distribute this data by RDM, the supervisor password of the target systems will be updated. b) Distribute the cmos data to the system that has a supervisor password. If the target system already has a supervisor password, you must set the password to RDM Console pages: 1. Open RDM main console. 2. Select the target system from the tree view and double-click. 3. The "Individual System Details" page should appear. Select the "Maintenance" tab. 4. Enter the supervisor password in the "BIOS Admin Password" edit box. 5. Uncheck the "Update BIOS Admin Password" checkbox. Note: ThinkPad systems do not support "Update BIOS Admin Password" on the RDM Console. ThinkPad systems only support "Distribute" the supervisor password from donor to target by .cms file. RDM is available on the IBM Website. The RDM website is at: http://www.ibm.com/servers/eserver/xseries/systems_management/ibm_director/extensions/rdm.html From the main RDM website there will be a link to the IBM Support pages and the downloadable fixes. Note for ThinkPad R31 users --------------------------- Due to security reason the Remote CMOS Update Utility is unable to edit following BIOS settings: Config -> Network: Wake On LAN Flash Over LAN Alert On LAN 2 Watchdog timer at ROM scan Config -> RFID Security: Antenna detection Gate through detection Config -> Processor serial number: Processor serial number Password: Power-On Password Supervisor Password Lock BIOS Settings Hard disk drive Password Startup: Boot ( Boot Priority ) Network ( Boot Priority for network boot ) Boot device List F12 Option Flash BIOS Updating by End-Users Trademarks ---------- * ThinkPad is a registered trademark of Lenovo. * IBM is a registered trademark of IBM Corporation. * Microsoft and Windows are registered trademarks of Microsoft Corporation. Other company, product, and service names may be registered trademarks, trademarks or service marks of others.