ThinkPad                                                    Mar. 6, 2007
BIOS Setup Menu Extension Utility for
                     the Resetting the Cryptographic Key

Version 1.00
========================================================================

What This Program Does
-----------------------
This program enables the Resetting the Cryptographic Key menu
in the ThinkPad BIOS Setup.

The following models are supported:
   - ThinkPad T61, T61p
   - ThinkPad R61
   - ThinkPad Reserved Edition

To use this program, refer to the "How to use" section.

Following hard drive is supported at time of the version 1.00 released.
   Seagate Momentus 5400 FDE.2


Important Notice
----------------
The ThinkPad BIOS that supports the Disk Encryption HDD has a feature to
reset a cryptographic key of a Full Disk Encryption(FDE) supported HDD.
The FDE make encryption to writing data to its disk and decryption for
reading out from a disk.  Without a same cryptographic key in an HDD,
the data inside can not be read properly decoded.

An HDD itself makes a cryptographic key and manages it.
The ThinkPad does not store any cryptographic key information.

Once a new key is defined, the previous key is deleted from an HDD and
then the read and write operation is done using the new key.
This means stored data is decoded with a different key and its output is
not same as before.
You can not boot from a disk nor read files after resetting a cryptographic
key.

Please make sure to use this feature.


Using this feature
------------------
Note: The Disk Encryption HDD feature issues a command that an HDD changes
      a cryptographic key to an HDD.  You can not read correct data from
      the cryptographic changed HDD anymore.

You will see a new entry, `Disk Encryption HDD' in the Security menu of
the BIOS Setup menu after using the BIOS Setup Menu Extension Utility.

Selecting this item will show this:
        Reset the key of the HDD in the HDD bay  [Enter]

Hitting Enter key makes showing next caution message and confirmation.
`Yes' confirmation shows next confirmation message.
You may be asked an HDD password, if you set one.
Further process will start after entering an HDD password.

Note: An HDD password will be deleted by this process.


Released Versions
-----------------
Version 1.00     03/06/2007, Initial release


How to determine what version is used
-------------------------------------
Run FDEMENU.EXE with no parameter.
Version information is displayed on the screen.


How to use
----------
  1. Prepare a IBM PC-DOS bootable floppy disk and a floppy disk drive.
  2. Copy the FDEMENU.EXE to the floppy disk.
  3. Attach the floppy disk drive to a ThinkPad that needs the feature.
  4. Turn on the ThinkPad.
  5. Run the FDEMENU.EXE. If the request is processed,
     the program returns 0. Otherwise, it returns 255
     with an error message.

       5-1. To know the current setting, run the tool
            as follow then the setting is displayed.

         >fdemenu

       5-2. To enable the menu, run the tool as follow:

         >fdemenu -e

       5-3. To disable the menu, run the tool as follow:

         >fdemenu -d


Trademarks
----------
* ThinkPad is a registered trademark of Lenovo.

* IBM is a registered trademark of IBM Corporation.

Other company, product, and service names may be registered trademarks,
trademarks or service marks of others.