Network Settings#
General#
Wake On Lan#
Whether Wake On LAN function works only when AC is attached, or also when with battery power.
Attention
- Only for ThinkPads with built-in Ethernet port.
- AC is required with magic packet type Wake On LAN.
- Wake On LAN function may be blocked due to password configuration.
Possible options:
- AC Only - Default.
- Disabled
- AC and Battery
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| WakeOnLAN | Disable, ACOnly, ACandBattery, Enable | No | Both |
Wake On LAN from Dock#
Controls Wake On LAN when connected to a cable dock (USB-C or Thunderbolt)
Attention
- Only for ThinkPads with no Ethernet port.
- Will not work while Secure Boot is disabled.
- Works only when ThinkPad USB-C Dock or ThinkPad Thunderbolt Dock is attached.
- May be blocked due to password configuration.
Possible options:
- On - Default.
- Off
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| WakeOnLANDock | Disable, Enable | No | Both |
Lenovo Cloud Services#
System connects Lenovo Cloud Services via HTTPs. DHCP option settings are not required.
Once this feature is switched On, it becomes available for selection in BIOS: Startup, at either Edit Boot Order, or Network Boot, or via F12 Boot Menu.
Lenovo Cloud Services enables additional options which vary by model:
- Lenovo Cloud Deploy (ITC) – sends Factory-Style images to customers for deployment in the field. More information: Lenovo Cloud Deploy
- Windows Virtual Desktop (VDI) – No longer offered. provides VDI environment to customer. VDI itself will be setup by the customer (IT Admin). If this option is selected, then it will become available as a boot option.
- System Firmware Update - select models can obtain and apply BIOS updates over the Internet.
Attention
This feature will not work while Secure Boot is disabled.
Possible options:
- On - Default.
- Off
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| LenovoCloudServices | Disable, Enable | No | Intel |
UEFI WI-FI Network Boot#
Wether to load UEFI Wi-Fi driver at next boot, able to connect to Access point.
Attention
Secure Boot must be enabled to use UEFI Network Boot.
Possible options:
- On
- Off - Default.
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| WiFiNetworkBoot | Disable, Enable | No | Intel |
UEFI IPv4 Network Stack#
Whether to enable UEFI IPv4 Network Stack for UEFI environment.
Possible options:
- On - Default.
- Off
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| IPv4NetworkStack | Disable, Enable | No | Both |
UEFI IPv6 Network Stack#
Whether to enable UEFI IPv6 Network Stack for UEFI environment.
Possible options:
- On - Default.
- Off
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| IPv6NetworkStack | Disable, Enable | No | Both |
UEFI Network Boot Priority#
Select Network Stack priority for UEFI PXE Boot.
Possible options:
- IPv4 First – Default.
- IPv6 First
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| UefiPxeBootPriority | IPv6First, IPv4First | No | Both |
Wireless Auto Disconnection#
Whether to Auto Disconnect Wireless feature when Ethernet cable is connected to Ethernet LAN.
Possible options:
- On
- Off - Default.
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| WirelessAutoDisconnection | Disable, Enable | No | Both |
MAC Address Pass Through#
Whether to enable MAC Address Pass Through when dock is attached.
Possible options:
- Disabled - Dock Ethernet uses its own MAC address. Default
- Internal MAC Address - Dock Ethernet uses same MAC address as internal LAN.
- Second MAC Address - Dock Ethernet uses the second MAC address that is stored in the system's EEPROM. This allows for a device-specific MAC address that is different from the internal NIC's MAC address so they can be managed separately if necessary.
Attention
For systems that do not have an internal NIC, the options are:
- Off - the dock will use it's own MAC Address
- On - dock will use MAC address stored in the system EEPROM.
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| MACAddressPassThrough | Disable, Enable, Second | No | Both |
Proxy Support#
Enable/Disable Proxy Support. If Enabled, the system connects to End-Point Server (such as Lenovo Cloud) via Proxy Server.
Possible options:
- Off – Default. This feature will not work while Secure Boot is disabled.
- On
Attention
To avoid security risks, only use reliable Proxy servers.
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| ProxySupport | Disable, Enable | Yes | Both |
Proxy URI#
Please set the URL starting with "http://" for Proxy Server.
Attention
"https://" is not supported.
The default port number for Proxy Server access is 80. However, a specific port number can be set after the colon( ":"). For example, "http://192.168.1.100:8080" for Port 8080 is used. Maximum character length is 255.
Reinstall Windows from Cloud#
Enable/Disable "Reinstall Windows from Cloud (Microsoft® Connected System Recovery)" in the App Menu invoked by F12.
Choosing Reinstall Windows from Cloud from the F12 menu will completely replace the system software, including all user files, and cannot be undone.This feature works with system-integrated Ethernet LAN or wireless LAN (only WPA2 personal). Secure Boot must be enabled to use Reinstall Windows from Cloud. Please note that this feature is not compatible with Lenovo Cloud Boot. Do not attempt to start Lenovo Cloud Boot while Reinstall Windows from Cloud is enabled.
Possible options:
- Disabled - Default.
- Enable
Custom URL Support Settings#
Custom URL Support#
Enable/Disable Custom URL Support.
Possible options:
- Off – Default. This feature will not work while Secure Boot is disabled.
- On
| WMI Setting name | Values | Locked by SVP | AMD/Intel |
|---|---|---|---|
| CustomUri | Disable, Enable | Yes | Both |
Add Custom HTTPS Boot Option#
Description for Custom HTTPS Boot Option.
Attention
- The description must be a unique string.
- http://" is not supported.
Maximum character length is 255.
The URL must start with "https://" for Custom HTTPS Boot Option.
A new HTTPS Boot Option will be created according to this Boot URL.
- Boot URL Address – the HTTPS URL for the new Custom HTTPS Boot Option.
- Description text to display – the label shown for this boot option in the boot list. Default:
UEFI HTTP Boot. - Generate the new Custom HTTPS Boot Option – creates the boot option from the values entered above.
Delete Custom HTTPS Boot Option#
Description of custom HTTPS boot option list that can be deleted.
Attention
Displays "No Custom HTTPS Boot Option exists" if none have been created.
Enroll OnPremise Server CA Cert#
Enroll the on-premise deployment server's CA (Certification Authority) certificate, used to validate the HTTPS connection to an on-premise server.
- Enroll Cert Using File – enroll the CA certificate from a file.
- File Explorer – browse to and select the certificate file to enroll.
Delete OnPremise Server CA Cert#
Delete OnPremise Server CA Cert and reset the Server CA Cert back to the default.
TLS Authorization Configuration#
Configure TLS authorization for the Custom HTTPS Boot connection.
WiFi Configuration#
Attention
Older models of ThinkPad present the management of WiFi Networks in BIOS Setup while newer models provide the WiFi Configation in the F12 Apps Menu at Startup.
All the settings in this group are not available via WMI.
MAC Address#
Media access control (MAC) address of the wireless network interface controller.
For every MAC Address the following information is shown:
- MAC Address - Media access control (MAC) address of the selected wireless network interface controller.
Possible options:
- Disconnected - Default.
- Connected to [SSID]
Attention
- There could be several MAC addresses for machines that have several wireless network interface controllers (NICs).
- Option
Connected to [SSID]displays the ID of the wireless network. - View only.
Wi-Fi Network List#
Attention
- All the settings in this group are not available via WMI.
- View only.
Number of networks: Number of current available networks.
For each network the Security Type is shown.
- Possible values are "Open" and "Secured".
- If Secured, the security type is displayed.
[SSID Value][Type]#
Each SSID has its own sub-group of settings. Open the items below for details.
Connection Status
Whether device is connected to this Wi-Fi network.
Attention
View only.
Possible statuses:
- Disconnected - Default.
- Connected
SSID
SSID (Service Set Identifier) is the name of the wireless network.
Attention
View only.
Security
Security type of this Wi-Fi network.
Attention
View only.
Possible options:
- Open
- WPA2-Personal
- WPA2-Enterprise - Default.
- PEAP
- EAP-TLS
Password
Enter password.
Attention
- Visible only for networks with security WPA2-Personal.
- Password length: 8-63 characters.
EAP Authentication Method
Select EAP Authentication Method.
Possible options:
- PEAP
- EAP-TLS
EAP Second Authentication Method
Select EAP Second Authentication Method.
Possible options:
- MSCHAPv2
Enroll CA Cert
Enroll CA (Certification Authority) certificate.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise.
Enroll Client Cert
Enroll client certificate.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise and if EAP Authentication Method is EAP-TLS.
Enroll Client Private Key
Enroll client private key.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise and if EAP Authentication Method is EAP-TLS.
Identity
Identity value if there is any.
View only.
Attention
- Identity length: 6-20 characters.
- Visible only for networks with security WPA2-Enterprise.
EAP Password
Field for entering EAP password.
Attention
- Password length: 1-63 characters.
- Visible only for networks with security WPA2-Enterprise.
[Action]
Possible actions:
- Connect to this network - visible if device is not connected to this Wi-Fi network
- Disconnect - visible if device is connected to this Wi-Fi network
Add Wi-Fi Network#
Attention
All the settings in this group are not available via WMI.
SSID#
Field for entering SSID value.
Security#
Select the security type of this Wi-Fi network.
Possible options:
- Open – Default
- WPA2 – Personal
- WPA2 – Enterprise
Password#
Enter password.
Attention
- Visible only for a network with security WPA2-Personal.
- Password length: 8-63 characters.
EAP Authentication Method#
Select EAP Authentication Method
Attention
Visible only for a network with security WPA2-Enterprise.
Possible options:
- PEAP – Default
- EAP-TLS
EAP Second Authentication Method#
Select Second Authentication Method
Attention
Visible only for a network with security WPA2-Enterprise and if EAP Authentication Method is PEAP.
Possible options:
- MSCHAPv2 – Default.
Enroll CA Cert#
Enroll CA (Certification Authority) certificate.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise.
Enroll Client Cert#
Enroll client certificate.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise and if EAP Authentication Method is EAP-TLS.
Enroll Client Private Key#
Enroll client private key.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise and if EAP Authentication Method is EAP-TLS.
Identity#
Enter identity value (if there is any).
Attention
- Identity length: 6-20 characters.
- Visible only for a network with security WPA2-Enterprise.
EAP Password#
Field for entering EAP password.
Attention
- Password length: 1-63 characters.
- Visible only for a network with security WPA2-Enterprise.
Scan Anyway#
Possible options:
- On - the network will be scanned when it does not broadcast its name. Default.
- Off - the network will not be scanned when it does not broadcast its name.
Visible only for a network with WPA2-Enterprise security.
Commit Changes and Exit#
This is the option to save changes and exits back to the Manage Wi-Fi network page.
Manage Wi-Fi Network#
Attention
- All the settings in this group are not available via WMI.
- Each listed network is represented by a
[SSID Value][Type]and has its own sub-group of settings - open the items below for details.
[SSID Value][Type]#
Each SSID has its own sub-group of settings. Open the items below for details.
SSID
Field for editing SSID value.
Security
Select the security type of this Wi-Fi network.
Attention
Default value depends on the network.
Possible options:
- Open
- WPA2-Personal
- WPA2-Enterprise
Password
Enter password.
Attention
- Visible only for a network with security WPA2-Personal.
- Password length: 8-63 characters.
EAP Authentication Method
Select EAP Authentication Method.
Possible options:
- PEAP – Default
- EAP-TLS
Visible only for a network with security WPA2-Enterprise.
EAP Second Authentication Method
Select Second EAP Authentication Method.
Possible options:
- MSCHAPv2 – Default.
Attention
Visible only for a network with security WPA2-Enterprise and if EAP Authentication Method is PEAP.
Enroll CA Cert
Enroll CA (Certification Authority) certificate.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise.
Enroll Client Cert
Enroll client certificate.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise and if EAP Authentication Method is EAP-TLS.
Enroll Client Private Key
Enroll client private key.
Empty by default.
Attention
Visible only for networks with security WPA2-Enterprise and if EAP Authentication Method is EAP-TLS.
Identity
Enter identity value (if there is any).
Attention
- Identity length: 6-20 characters.
- Visible only for a network with security WPA2-Enterprise.
EAP Password
Enter EAP password.
Attention
- Password length: 1-63 characters.
- Visible only for a network with security WPA2-Enterprise.
Scan Anyway
Whether the network will be scanned anyway, even if it does not broadcast its name.
Possible options:
- On
- Off - Default.
Attention
Visible only for a network with security WPA2-Enterprise.
Commit Changes and Exit
Save changes and exits back to the Manage Wi-Fi network page.
Forget This Network
Forget the settings for the selected network and disconnect from it.
Change Priority#
View list of saved Wi-Fi networks.
Attention
The option will show a warning message if Network List is empty.
See descriptions below.
Priority List
List of SSIDs of the saved networks.
Commit Changes and Exit
Save changes and exits back to the Manage Wi-Fi network page.