Skip to content

Certificate-based BIOS Authentication#

CB Bios Auth

Beginning with 2022 ThinkPad models, it is now possible to configure systems to use a digital signing certificate instead of a supervisor password. Although this feature does not eliminate the challenge of initially securing the device, it does eliminate the need to exchange passwords in plain text when scripting BIOS settings changes.

Reset Certificate
Remove the enrolled certificate.