ThinkPad June 09, 2005 Remote CMOS Update Utility for Remote Deployment Manager(RDM) Version 3.30 ======================================================================== What This Program Does ----------------------- This program updates ThinkPad's BIOS Setup data remotely using RDM Version 3.0 or higher or diskette. The following models are supported: - ThinkPad A30, A30p - ThinkPad A31, A31p - ThinkPad G40, G41 - ThinkPad R31, R32 - ThinkPad R40, R40e - ThinkPad R50, R50p, R50e, R51, R52 - ThinkPad T30 - ThinkPad T40, T40p, T41, T41p, T42, T42p, T43, T43p - ThinkPad X30, X31, X32 - ThinkPad X40, X41, X41 Tablet To determine if you have to update this program or not, refer to the "Summary of Changes" section. To use this program, refer to the "How to use" section. Released Versions ----------------- Version 3.05 03/05/2002, Initial release Version 3.07 05/24/2002 Version 3.10 06/25/2002 Version 3.11 08/06/2002 Version 3.14 01/09/2003 Version 3.15 02/18/2003 Version 3.22 09/08/2003 Version 3.23 03/16/2004 Version 3.24 04/28/2004 Version 3.27 09/27/2004 Version 3.28 01/25/2005 Version 3.30 05/24/2005 Summary of Changes ------------------ Where: Diskette version (for example, 1.00 means Version 1.00) (New) New function or enhancement (Fix) Correction to existing function <3.30> -(New) Support for ThinkPad X41 Tablet <3.28> -(New) Support for ThinkPad T43, T43p, R52, X32, X41 <3.27> -(New) Support for ThinkPad G41 <3.24> -(New) Support for ThinkPad T42, T42p <3.23> -(New) Support for ThinkPad R51, R50e <3.22> -(New) Support for ThinkPad R50, R50p, T41, T41p, X40 -(New) Support for distribution of Power on Password, Hard disk drive Password by diskette -(New) Support for distribution of UIA data. <3.15> -(New) Support for ThinkPad R40e, T40, T40p, X31, G40 <3.14> -(New) Support for ThinkPad R40 <3.11> -(New) Support for ThinkPad X30 -(New) Support for Distribution of supervisor password <3.10> -(New) Support for ThinkPad A30, A30p -(New) Support for secure data read/write. <3.07> -(New) Support for ThinkPad T30, R32 <3.05> -(New) Support for ThinkPad A31, A31p, R31 How to determine what version is used ------------------------------------- Run SRCMOS.EXE with no parameter. Version information is displayed on the screen. How to use ---------- This information is a supplement of “CMOS Update” of “Captor 3. RDM Tasks” in "Remote Deployment Manager 4.x Operations Guide" when CMOS update on ThinkPad using RDM is performed. Creating a CMOS Settings Image (for ThinkPad system user) 1. At a donor workstation: 1-1. Start up the workstation and access the Easy-setup program. (you can access this program by pressing F1 key during the power-on self-test (POST)) 1-2. Change and save the desired setting as required. 1-3. Exit from the Easy-setup program and restart the workstation. Ensure that the workstation starts up and functions properly. 2. Rename the SRCMOS.EXE.(refer to the table below to rename the program name.) => 'SRCMOS' + 'xx' + '.EXE' xx: system board identifier (two characters) 3. Use the SRCMOSxx.EXE program to save the current settings of the donor workstation to a file named with the .CMS extension. 3-1. Insert a DOS or Win9x boot diskette in the A drive. 3-2. Power on the system. 3-3. When the IBM Logo screen appears, press the Esc key. The screen mode will change to the text mode. 3-4. Execute the SRCMOS.exe with the correct parameters: > SRCMOSxx \path\file_name.CMS /c If the donor system has a supervisor password: (This option is not applicable for ThinkPad R31) > SRCMOSxx \path\file_name.cms /kpap Password prompt will appear. Type correct password and press enter. Note: If you capture the data of the system that have supervisor password, The captured data have an encrypted supervisor password of the donor system. Please refer to the "Note for ThinkPad A30, A30p,..." for detailed information. 4. Create CMOS Update image For RDM version 4.1 or newer, 4-1. Prepare BIOS Update diskette for target system. 4-2. Copy SRCMOSxx.EXE into the BIOS diskette. 4-3. Create Firmware Flash image of the BIOS Update diskette. (Using Image management menu from [Tasks] -> [Remote Deployment Manager]) 4-4. Copy CMOS setting file into appropriate folder(directory) on RDM server. 4-5. Create CMOS setting image on RDM server. (Using Image management menu from [Tasks] -> [Remote Deployment Manager]) Select the CMOS setting file name in "Enter CMOS Clone file" field. For RDM version 3.2 or earlier, 4-1. Copy SRCMOSxx.EXE and .CMS file to the corresponding BIOS folder(directory) on your server which is named: C:\RDM_install_dir\BIOS\Flash_BIOS_Name where the 'Flash_BIOS_Name' folder(directory) is the name of the BIOS level on your donor workstation (unless this was changed by the system administrator during the Read BIOS Flash diskette process). Note: When you are not able to get the BIOS update diskette when using RDM version 3.2 or earlier: You can store CMOS setting files and SRCMOSxx.EXE using following 　　　　　 steps. 　　　　　 a. Check the "Current BIOS Level" of the Maintenance page of the Individual Client Details notebook. b. Create the folder(directory) under the \RDM_install_dir\BIOS which has the same name to "Current BIOS Level". For example, if "Current BIOS Level" is IBUJ01WW, the required folder(directory) is: \RDM_installed_dir\BIOS\IBUJ01WW c. Copy SRCMOSxx.EXE and .CMS file to above folder(directory). You must uncheck the "Update BIOS" check box of the Maintenance page. (Check the "Update CMOS with file" check box only) --------------------------------------------------------------------- | Product name | BIOS level name | SRCMOS.EXE | | | (Flash_BIOS_Name) | program name | |-------------------------|--------------------|----------------------| | ThinkPad A30, A30p | 1EUJaabb | SRCMOS1E.EXE | | ThinkPad A31, A31p | 1GUJaabb | SRCMOS1G.EXE | | ThinkPad A31, A31p | 1NUJaabb | SRCMOS1G.EXE | | ThinkPad G40 | 1TUJaabb | SRCMOS1T.EXE | | ThinkPad G41 | 1XUJaabb | SRCMOS1X.EXE | | ThinkPad R31 | 1FUJaabb | SRCMOS1F.EXE | | ThinkPad R32 | 1MUJaabb | SRCMOS1M.EXE | | ThinkPad R40 (*1) | 1OUJaabb | SRCMOS1O.EXE | | ThinkPad R40 (*2) | 1PUJaabb | SRCMOS1P.EXE | | ThinkPad R40e | 1SUJaabb | SRCMOS1S.EXE | | ThinkPad T30 | 1IUJaabb | SRCMOS1I.EXE | | ThinkPad T40, T40p, T41,| 1RUJaabb | SRCMOS1R.EXE | | T41p, T42, T42p,| | | | R50, R50p | | | | ThinkPad R51 (*3) | 1RUJaabb | SRCMOS1R.EXE | | ThinkPad R51 (*4) | 1VUJaabb | SRCMOS1V.EXE | | ThinkPad T43 (*5) | 1YUJaabb | SRCMOS1Y.EXE | | ThinkPad T43 (*6) | 70UJaabb | SRCMOS70.EXE | | ThinkPad T43p | 1YUJaabb | SRCMOS1Y.EXE | | ThinkPad R52 (*7) | 70UJaabb | SRCMOS70.EXE | | ThinkPad R52 (*8) | 76UJaabb | SRCMOS76.EXE | | ThinkPad R50e | 1WUJaabb | SRCOMS1W.EXE | | ThinkPad X30 | 1KUJaabb | SRCMOS1K.EXE | | ThinkPad X31, X32 | 1QUJaabb | SRCMOS1Q.EXE | | ThinkPad X40, X41 | 1UUJaabb | SRCMOS1U.EXE | | ThinkPad X41 Tablet | 75UJaabb | SRCMOS75.EXE | --------------------------------------------------------------------- aa: version, bb: country code (*1) - model 2681/2682/2683 (*2) - model 2722/2723/2724 (*3) - model 1829/1830/1831/1836/1840/1841 (*4) - model 2887/2888/2889/2894/2895/2883 (*5) - model 2668/2669/2678/2679/2686/2687 (*6) - model 1871/1872/1873/1874/1875/1876 (*7) - model 1858/1859/1860/1861/1862/1863 (*8) - model 1846/1847/1848/1849/1850/1870 Note -------------------------------------------------------------- (This note is not applicable for ThinkPad R31. Please see the note for ThinkPad R31 below.) 1) From Ver3.22, SRCMOS can distribute Power on Password and Harddisk Password by diskette. To Use This Function, you must use following level of BIOS. From Ver3.22, SRCMOS has the ability to create a capture image with an embedded Power on Password and Harddisk Password. Please follow the process outlined below in order to securely embed and distribute a CMOS settings image which includes Power on Password and Harddisk Password. To use this Function, you must use the following level of BIOS. ------------------------------------------------- | Product name | BIOS level | |-------------------------|-----------------------| | ThinkPad G41 | (All BIOS support) | | ThinkPad R50, R50p, R50e| (All BIOS support) | | ThinkPad R51 | (All BIOS support) | | ThinkPad R52 | (All BIOS support) | | ThinkPad T40, T40p | 1RET68WW or later | | ThinkPad T41, T41p | (All BIOS support) | | ThinkPad T42, T42p | (All BIOS support) | | ThinkPad T43, T43p | (All BIOS support) | | ThinkPad X31, X32 | 1QET61WW or later | | ThinkPad X40, X41 | (All BIOS support) | | ThinkPad X41 Tablet | (All BIOS support) | ------------------------------------------------- 1-1 Creating data file that contain password on donor system WARNING: this process creates an intermediate .cms file that contains the Power on Password, Hard disk drive Password and a pointer to the system that these passwords are intended to be installed on. Please be sure to treat this intermediate file as a potential security exposure that exists until the reset process is complete. Be sure to transmit the file securely to the target system and to destroy the file when finished. Examples of secure transmission include carrying the file on removable media to the target system or encrypting the file before transmission over a network to the target system. 1. Follow "How to Use - Creating a CMOS Settings Image" above and proceed to 3-3. 2. Execute SRCMOS.exe with correct parameters: > SRCMOSxx \path\file_name.CMS /c /EP password.csv where password.csv contain the Power on Password and the Hard disk drive Password, and the filename of the .CMS file for each of the target systems. "Sample.txt" shows the format of .CSV file. *1) If the supervisor password is set on a donor system, you must the command line option "/kpap" to enter the password by the keyboard: > SRCMOSxx \path\file_name.CMS /c /KPAP /EP password.csv ~~~~~ In this case, .CMS file contain a supervisor password 2-2 Distributing data file to target systems by diskette 1. Copy the .CMS files and SRCMOS to boot diskette. 2. Boot the target system by this diskette and run SRCMOS: > SRCMOSxx \path\file_name.CMS /u 3. System restarts automatically. After restart, system shutdown automatically at IBM ThinkPad logo screen. *1) If the target system already has a power on password or hard disk drive password, you can not set the passwords by SRCMOS. You must remove the passwords by BIOS Setup. *2) If the target system already has a supervisor password, you must use a command line option "/KPAP" to enter the supervisor password by keyboard: > SRCMOSxx \path\file_name.CMS /u /KPAP 2) From Ver3.22, SRCMOS can read/write UIA data. To save UIA data to .CMS file, use command line option "/UIA". If .CMS file contain UIA data, SRCMOS set the data to target system. 3) From version 3.10, SRCMOS can read/write bios secure data except for Power on Password and Hard disk drive Password. To use this function, you must use following level of BIOS. ------------------------------------------------- | Product name | BIOS level | |-------------------------|-----------------------| | ThinkPad A30, A30p | 1EET54WW or later. | | ThinkPad A31, A31p | 1GET29WW or later. | | ThinkPad G40, G41 | (All BIOS support) | | ThinkPad R32 | 1MET55WW or later. | | ThinkPad R40, R40e | (All BIOS support) | | ThinkPad R50, R50p, R50e| (All BIOS support) | | ThinkPad R51 | (All BIOS support) | | ThinkPad R52 | (All BIOS support) | | ThinkPad T30 | 1IET27WW or later. | | ThinkPad T40, T40p | (All BIOS support) | | ThinkPad T41, T41p | (All BIOS support) | | ThinkPad T42, T42p | (All BIOS support) | | ThinkPad T43, T43p | (All BIOS support) | | ThinkPad X30, X31, X32 | (All BIOS support) | | ThinkPad X40, X41 | (All BIOS support) | | ThinkPad X41 Tablet | (All BIOS support) | ------------------------------------------------- If you use a former version of BIOS than above, you must use "/E" option when capturing donor settings. ex) srcmos.exe config.cms /c /e If you use /e option, SRCMOS will not attempt to read secure data. (You have not to use /e option at update target system.) 4) From Ver3.11, SRCMOS can support A) Distribution of supervisor password, and B) Distribute cmos data to the target systems that have supervisor password. To use these features, you must apply "RDM 3.1.01 Patch 1" to your RDM system. A) Distribute supervisor password from donor to targets If the donor system has a supervisor password, the captured data file (.cms file) from the system contain an encrypted supervisor password of the donor system. If you distribute this data by RDM, the supervisor password of the target systems will be updated. B) Distribute cmos data to the system that has supervisor password If the target system already has supervisor password, You must set the password to RDM Console pages: 1. Open RDM main console. 2. Select the target system from tree view and double-click. 3. "Individual System Details" page should appear. Select the "Maintenance" tab. 4. Enter the supervisor password in the "BIOS Admin Password" edit box. 5. Uncheck the "Update BIOS Admin Password" checkbox. Note: ThinkPad systems do not support "Update BIOS Admin Password" on RDM Console. ThinkPad systems only support "Distribute" the supervisor password from donor to target by .cms file. RDM 3.1.01 Patch 1 is available on IBM Website. The RDM website is at: http://www.pc.ibm.com/us/eserver/xseries/systems_management/rdm.html From the main RDM website there will be a link to the IBM Support pages and the downloadable fixes. Note for ThinkPad R31 users ----------------------------------- Due to security reason the Remote CMOS Update Utility is unable to edit following BIOS settings: Config -> Network: Wake On LAN Flash Over LAN Alert On LAN 2 Watchdog timer at ROM scan Config -> RFID Security: Antenna detection Gate through detection Config -> Processor serial number: Processor serial number Password: Power-On Password Supervisor Password Lock BIOS Settings Hard disk drive Password Startup: Boot ( Boot Priority ) Network ( Boot Priority for network boot ) Boot device List F12 Option Flash BIOS Updating by End-Users Trademarks ---------- * ThinkPad is a registered trademark of Lenovo. * Microsoft and Windows are registered trademarks of Microsoft Corporation. Other company, product, and service names may be registered trademarks, trademarks or service marks of others.