Password Policies#
General#
More information at Lenovo Support - types of password
Set Minimum Length#
Possible options:
- Disabled - no minimum (see below). Default.
- 4 - 12 characters minimum.
Attention
- If no minimum is set, passwords may be 1 to 128 characters long.
- If a minimum is set, it applies to:
- Supervisor Password (SVP)
- System Management Password (SMP)
- Power-on (POP) and Hard Disk Passwords
- If both
Set Minimum LengthandSet Strong Passwordare enabled, the longest value for minimum length applies.
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| SetMinimumLength | Disabled, 4 characters, 5 characters, 6 characters, 7 characters, 8 characters, 9 characters, 10 characters, 11 characters, 12 characters | Yes |
Set Strong Password#
Possible options:
- Enabled - Upper case, lower case and numeric characters are all required. Special characters are optional. The minimum length is 8. Default.
- Disabled - The minimum length is 1 character.
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| SetStrongPassword | Disabled, Enabled | Yes |
Keyboard Layout#
Select the keyboard language for password.
Possible options:
- English - Default.
- French
- German
- Russian
- Chinese
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| KeyboardLayout | English, French, German, Russai, Chinese | Yes |
BIOS Password At System Boot#
Whether to give a BIOS password prompt at system boot (when the system starts from the full off or hibernate state).
Attention
To prevent unauthorized access to the system, we recommend setting user authentication on the OS.
Possible options:
- Yes - Default.
- No
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| BIOSPasswordAtSystemBoot | No, Yes | Yes |
BIOS Password At Reboot#
Whether the power-on password (POP) is required when system restarts.
Possible options:
- No - Default.
- Yes
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| BIOSPasswordAtReboot | No, Yes | Yes |
BIOS Password At Boot Device List#
Whether the user is prompted for a password when F12 is pressed during POST (and an administrator password was set).
Possible options:
- No - Default.
- Yes
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| BIOSPasswordAtBootDeviceList | No, Yes | Yes |
Require SVP when Flashing#
Whether the supervisor password (SVP) is required when updating the system firmware.
Possible options:
- No - Default.
- Yes
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| RequireSVPwhenFlashing | No, Yes | Yes |
POP Changeable by User#
Whether the Power-On Password (POP) can be changed by users, or else, only with the Supervisor Password (SVP).
Possible options:
- Yes - Default.
- No
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| POPChangeablebyUser | No, Yes | Yes |
Allow the Jumper to Clear SVP#
Whether to allow the hardware jumper to clear the Supervisor password.
Attention
When disabled, no action can reset the SVP if you forget it.
Possible options:
- Yes - Default.
- No
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| AllowJumperClearSVP | No, Yes | Yes |
Password Count Exceeded Error#
Whether to show the POST 0199 error and password prompt.
Possible options:
- Enabled - Default.
- Disabled
| WMI Setting name | Values | Locked by SVP |
|---|---|---|
| PasswordCountExceededError | Disabled, Enabled | Yes |