12:50 p.m.
Hi All;
I just ordered a Lenovo Thinkpad W540,
the specs list this:
Security Chip 2 Security Chip Enabled
I plan to run Fedora 20 on it. Is this something I should be concerned
about? Can it be disabled in the bios?
Thanks in advance...
1:05 p.m.
On Feb 21, 2014, at 11:50 AM, CS DBA <cs_dba(a)consistentstate.com> wrote:
Hi All;
I just ordered a Lenovo Thinkpad W540,
the specs list this:
Security Chip 2 Security Chip Enabled
I plan to run Fedora 20 on it. Is this something I should be concerned about? Can it be
disabled in the bios?
Thanks in advance…
This could be a TPM.
Chris Murphy
1:12 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/21/2014 02:07 PM, Robert P. J. Day wrote:
i was trying to be delicate, but what i was told is that being
manufactured in china was enough to make them ineligible for entry
into secure US military installations. you can make of that what
you wish -- it's what i was told by people in a position to know.
AFAIK, that was a US Military mandate from almost the moment IBM sold
their laptop (PC?) business to Lenovo. I worked in a Secure Facility
in Asheville, NC with the AF Combat Climatology unit there (I managed
the $3m HPCC that processed and delivered all weather data to them)
several years ago and that was about the time Lenovo bought that from
IBM. It was a big deal then because quite a bit of the equipment in
that SCF were ThinkPads and the big question was what to do about
repair/replacements going forward.
(All that said, I have no problem being indelicate about it. I mean,
the NSA reads all our crap anyway, why fret over the Chinese? reading
it, too?)
- --
Mark Haney
Network/Systems Administrator
Practichem
W: (919) 714-8428
Fedora release 20 (Heisenbug) 3.12.10-300.fc20.x86_64
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJTB6UMAAoJEM/YzwEAv6e7wIEH/38MgwfOCpepuxAXcoptTlWE
pwtgUnL98MLhJMMFNMyXJS4RbCOiJMJvUTIlD1SgIfz/oUxykOLit/F5ebR+09yD
/pdm8tb+HQR8PWjc6ybN1X04qQjc9JUGB5C/1Ou5IHK0N1GDVxh9ZF+8xkdcbnqM
vlTmQ7L5c4WNGrbdOSGPwOOQxJRdjdxKjYB0uVv9giPAi7hyG15oKmlv3Y9hNrEL
1W9fwpT8h5gmSKFNhJU4PIodfw8j7ELEFg5sWj6tA63KfhdKvDNALuyaaF40wWK0
HJYIFquOGDN6X1RN/tr8B/GuTw55veOEx+9GDzGWfSd7MeWHqwqN9tRb1K8P1YI=
=/jlG
-----END PGP SIGNATURE-----
1:07 p.m.
On Fri, 21 Feb 2014, CS DBA wrote:
On 2/21/14, 11:54 AM, Robert P. J. Day wrote:
> On Fri, 21 Feb 2014, CS DBA wrote:
>
> > Hi All;
> >
> > I just ordered a Lenovo Thinkpad W540,
> >
> > the specs list this:
> > Security Chip 2 Security Chip Enabled
> >
> > I plan to run Fedora 20 on it. Is this something I should be
> > concerned about? Can it be disabled in the bios?
> i don't know about that chip, but a few weeks ago, i was down south
> chatting with some military IT contractors, and they told me that in
> most sites they work in, *no* *one* is even allowed into the building
> with a lenovo laptop -- they are considered that insecure/compromised.
>
> no idea if this relates to your security chip question, but i
> thought i'd share that.
>
> rday
>
Do you have any details as to why? I plan to run Linux on it, does
this change things?
i was trying to be delicate, but what i was told is that being
manufactured in china was enough to make them ineligible for entry
into secure US military installations. you can make of that what you
wish -- it's what i was told by people in a position to know.
rday
--
========================================================================
Robert P. J. Day Ottawa, Ontario, CANADA
http://crashcourse.ca
Twitter: http://twitter.com/rpjday
LinkedIn: http://ca.linkedin.com/in/rpjday
========================================================================
1:06 p.m.
There's no need to be concerned. You're conflating a few different issues.
The security chip is a TPM, and they have been fairly common for several
years. It just allows secure key storage for software that might need it. A
TPM won't get in your way.
The other issue is UEFI Secure Boot. There's lots of opinions on the
matter, plus it's quite complicated, so I'll leave that to you to research.
That being said, I received a T440S this week, which is running the same
UEFI. Fedora 20 takes care of all the secure boot and UEFI setup without
any issue. I am using f20 with secure boot and didn't need to configure a
thing.
On Friday, February 21, 2014, CS DBA <cs_dba(a)consistentstate.com> wrote:
Hi All;
I just ordered a Lenovo Thinkpad W540,
the specs list this:
Security Chip 2 Security Chip Enabled
I plan to run Fedora 20 on it. Is this something I should be concerned
about? Can it be disabled in the bios?
Thanks in advance...
--
users mailing list
users(a)lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
1:01 p.m.
2014-02-21 19:58 GMT+01:00 CS DBA <cs_dba(a)consistentstate.com>:
On 2/21/14, 11:54 AM, Robert P. J. Day wrote:
> On Fri, 21 Feb 2014, CS DBA wrote:
>
> Hi All;
>>
>> I just ordered a Lenovo Thinkpad W540,
>>
>> the specs list this:
>> Security Chip 2 Security Chip Enabled
>>
>> I plan to run Fedora 20 on it. Is this something I should be
>> concerned about? Can it be disabled in the bios?
>>
> i don't know about that chip, but a few weeks ago, i was down south
> chatting with some military IT contractors, and they told me that in
> most sites they work in, *no* *one* is even allowed into the building
> with a lenovo laptop -- they are considered that insecure/compromised.
>
> no idea if this relates to your security chip question, but i
> thought i'd share that.
>
> rday
>
> Do you have any details as to why? I plan to run Linux on it, does this
change things?
--
users mailing list
users(a)lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
... maybe this chip is not NSA controlled :)
--
Alessandro Brezzi
12:59 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/21/2014 01:50 PM, CS DBA wrote:
Hi All;
I just ordered a Lenovo Thinkpad W540,
the specs list this: Security Chip 2 Security Chip
Enabled
I plan to run Fedora 20 on it. Is this something I should be
concerned about? Can it be disabled in the bios?
I'm running F20 on a W540 and I haven't had any trouble with it. I
didn't have to touch it. We run Lenovo here almost exclusively and
Fedora, CentOS and Mint all run fine on them.
- --
Mark Haney
Network/Systems Administrator
Practichem
W: (919) 714-8428
Fedora release 20 (Heisenbug) 3.12.10-300.fc20.x86_64
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJTB6ImAAoJEM/YzwEAv6e7AT0IAK6X7BHcxkFNWFEbG7Qf4F9b
So/ms+w5Dnki6detEQWGAROwqf+zb/6+F3g3YmSAcl31P3gyVFxVzYwWoIyHYSpR
C+8W1XuPD+24lX99mVRnmyy5T7MOFpwy973jLJjF+YYY6cZ8P0Ai3apVnVEpQnVw
tLZx0gHMMae9j02Z3wRmKA2kcRPHMG9BweN5x6OT9LHohYBP8MV6QHuOXa4foXPq
/pEhvLMIQPTBisvbIkfAMqDr8jmxXFQA8k/xqDuu/UPPLbHwJYll8QFVCDT4LfAR
2XUUB9g+Riv9YQrIb/7vr6M0m9tJf2cvO+W6QcC6Bnwr1+SSVcFYm8j/+Z6qYIg=
=o/9P
-----END PGP SIGNATURE-----
12:58 p.m.
On 2/21/14, 11:54 AM, Robert P. J. Day wrote:
On Fri, 21 Feb 2014, CS DBA wrote:
> Hi All;
>
> I just ordered a Lenovo Thinkpad W540,
>
> the specs list this:
> Security Chip 2 Security Chip Enabled
>
> I plan to run Fedora 20 on it. Is this something I should be
> concerned about? Can it be disabled in the bios?
i don't know about that chip, but a few weeks ago, i was down south
chatting with some military IT contractors, and they told me that in
most sites they work in, *no* *one* is even allowed into the building
with a lenovo laptop -- they are considered that insecure/compromised.
no idea if this relates to your security chip question, but i
thought i'd share that.
rday
Do you have any details as to why? I plan to run Linux on it, does this
change things?
12:56 p.m.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/21/2014 01:54 PM, Robert P. J. Day wrote:
i don't know about that chip, but a few weeks ago, i was down
south chatting with some military IT contractors, and they told me
that in most sites they work in, *no* *one* is even allowed into
the building with a lenovo laptop -- they are considered that
insecure/compromised.
no idea if this relates to your security chip question, but i
thought i'd share that.
I worked in a SCF with the Air Force and according to the officers I
knew there, the mandate for Lenovo's wasn't so much about them being
insecure as it was them being Chinese.
FWIW.
- --
Mark Haney
Network/Systems Administrator
Practichem
W: (919) 714-8428
Fedora release 20 (Heisenbug) 3.12.10-300.fc20.x86_64
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJTB6FfAAoJEM/YzwEAv6e76CMH/Rngo+bj/2Bo5DPADgz63SoT
X60xRGNCOHrTQ9+vNBOA159jp9P3fWw1n9m2UkAL57kZxubyE+IfgwuzynJyRguK
Cpo0+x24aio0QeC9GxpP9qUs5m2YKSf1K04hLun+2MK4zfyA1WFvToNqR2bZuK+R
EV58d/Tvrt5oIoikQQSJwBHYm8U61kIkufzjxrN/ditcYNmI1NbR001SC3WfAu42
2J3kpHqE5+mY2feZ5+9KTROVRczrB9LjwHcvlNHvFaAzXobqGPna/6E2QRn4Axyi
RAlYGPPHYDKUyl1DR4LCOu3ZH7Z7Orguy4KTHmBe7BGjwB6gLbLw/HNTmarH8aA=
=9clL
-----END PGP SIGNATURE-----
12:54 p.m.
On Fri, 21 Feb 2014, CS DBA wrote:
Hi All;
I just ordered a Lenovo Thinkpad W540,
the specs list this:
Security Chip 2 Security Chip Enabled
I plan to run Fedora 20 on it. Is this something I should be
concerned about? Can it be disabled in the bios?
i don't know about that chip, but a few weeks ago, i was down south
chatting with some military IT contractors, and they told me that in
most sites they work in, *no* *one* is even allowed into the building
with a lenovo laptop -- they are considered that insecure/compromised.
no idea if this relates to your security chip question, but i
thought i'd share that.
rday
--
========================================================================
Robert P. J. Day Ottawa, Ontario, CANADA
http://crashcourse.ca
Twitter: http://twitter.com/rpjday
LinkedIn: http://ca.linkedin.com/in/rpjday
========================================================================
3734
days inactive
3734
days old
9 comments
6 participants
participants (6)
-
Alessandro Brezzi -
Chris Murphy -
CS DBA -
Justin Brown -
Mark Haney -
Robert P. J. Day