https://www.thinkwiki.org/w/api.php?action=feedcontributions&user=CarlosPerelloMarin&feedformat=atomThinkWiki - User contributions [en]2024-03-28T18:49:08ZUser contributionsMediaWiki 1.31.12https://www.thinkwiki.org/w/index.php?title=Category:X41&diff=32611Category:X412007-08-27T21:33:16Z<p>CarlosPerelloMarin: Updated the Hardware Maintenance Manual to latest version</p>
<hr />
<div>{| width="100%"<br />
|style="vertical-align:top" |<br />
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;"><br />
=== ThinkPad X41 ===<br />
This pages gives an overview of all ThinkPad X41 related topics.<br />
==== Standard Features ====<br />
* [[Intel Pentium M (Dothan)]] 1.5 or 1.6GHz LV CPU<br />
* [[Intel Graphics Media Accelerator 900]]<br />
** 12.1" TFT display with 1024x768 resolution<br />
* 256, 512MB or 1GB [[PC2-4200]] memory standard<br />
* 1.8" 40 or 60GB PATA HDD<br />
* [[AD1981B]] AC'97 Audio controller<br />
* Broadcom 10/100/1000 Ethernet controller<br />
* [[CDC slot]] with one of the following:<br />
** [[IBM Integrated 56K Modem (MDC-2)]]<br />
** [[IBM Integrated Bluetooth IV with 56K Modem (BMDC-3)]]<br />
* [[MiniPCI slot]] with one of the following:<br />
** [[Intel PRO/Wireless 2200BG Mini-PCI Adapter]]<br />
** [[Intel PRO/Wireless 2915ABG Mini-PCI Adapter]]<br />
* [[Embedded Security Subsystem|IBM Embedded Security Subsystem 2.0]]<br />
* [[Active Protection System|IBM Active Protection System]]<br />
* [[Integrated Fingerprint Reader]] in select models<br />
* [[SD Card slot]] with IO support<br />
* [[CardBus slot]] (Type 2)<br />
</div><br />
|style="vertical-align:top" |<br />
[[image:ThinkPadX40.jpg|ThinkPad X41]]<br />
|}<br />
* [ftp://ftp.software.ibm.com/pc/pccbbs/mobiles_pdf/39t9290.pdf ThinkPad X41 - Hardware Maintenance Manual (January 2006)] (7,686,266 Bytes)<br />
<br />
[[Category:X Series]]</div>CarlosPerelloMarinhttps://www.thinkwiki.org/w/index.php?title=Category:X61s&diff=32603Category:X61s2007-08-27T20:18:19Z<p>CarlosPerelloMarin: Added a link to the Hardware Maintenance Manual</p>
<hr />
<div>{| width="100%"<br />
|style="vertical-align:top" |<br />
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;"><br />
=== ThinkPad X61s ===<br />
This pages gives an overview of all ThinkPad X61s related topics.<br />
<br />
==== Standard Features ====<br />
* One of the following processors:<br />
** [[Intel Core 2 Duo]] CPU L7300 @ 1.40GHz<br />
** [[Intel Core 2 Duo]] CPU L7500 @ 1.60GHz<br />
* [[Intel Graphics Media Accelerator X3100]]<br />
** 12.1" TFT display with 1024x768 resolution<br />
* 1GB or 2GB memory [[PC2-5300]] memory standard, max 4GB<br />
* 120GB, [..] SATA HDD <br />
* [[Active Protection System|IBM Active Protection System]]<br />
* [[AD1984]] HD Audio 1.0 controller<br />
* [[Ethernet Controllers#Intel Gigabit (10/100/1000)|Intel Gigabit Ethernet Controller]]<br />
* [[Intel PRO/Wireless 3945ABG Mini-PCI Express Adapter]] / [[Intel PRO/Wireless 4965AGN Mini-PCI Express Adapter]]<br />
* [[Embedded Security Subsystem|IBM Embedded Security Subsystem 2.0]]<br />
* [[Integrated Fingerprint Reader]] in some models<br />
* [[SD Card slot]] with IO support<br />
* [[CardBus slot]] (Type 2)<br />
* Firewire (IEEE1394)<br />
</div><br />
|style="vertical-align:top" |<br />
[[Image:ThinkPadX60.jpg|ThinkPad X61]]<br />
|}<br />
<br />
* [ftp://ftp.software.ibm.com/pc/pccbbs/mobiles_pdf/42x3550_01.pdf ThinkPad X61s - Hardware Maintenance Manual (July 2007)] (10,088,308 Bytes)<br />
<br />
<br />
[[Category:X Series | X61s]]</div>CarlosPerelloMarinhttps://www.thinkwiki.org/w/index.php?title=Embedded_Security_Subsystem&diff=32599Embedded Security Subsystem2007-08-27T18:37:10Z<p>CarlosPerelloMarin: My X61s has this technology too</p>
<hr />
<div>{| width="100%"<br />
|style="vertical-align:top;padding-right:20px;width:10px;" | [[Image:ESS.jpg|IBM Embedded Security Subsystem]] __NOTOC__<br />
|style="vertical-align:top" |<br />
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;"><br />
=== The Embedded Security Subsystem ===<br />
The Embedded Security Subsystem is a chip on the ThinkPads mainboard that can take care of certain security related tasks conforming to the TCPA standard. It was first introduced among the T23 models and is now under the name Embedded Security Subsystem 2.0 an integral part of most of the modern ThinkPads. The functions of the chip are fall into three main groups:<br />
* public key functions<br />
* trusted boot functions<br />
* initialization and management functions<br />
<br />
The purpose of the whole thing is to keep the user's sensitive data out of range from software based attacks (like viruses, internet attacks etc.). One way the chip offers to achieve this is by providing storage for keys along with the neccessary functions to handle them within itself, so that a for example a private key never has to leave the chip (can't be seen by any piece of software). Besides this, there are more complex topics covered by the functionality of the chip. If you want to find out more about it you can find good documents on the [http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page].</div><br />
|}<br />
<br />
{{NOTE|Some ThinkPads have the TPM chip integrated into the SuperIO chip, or soldered to the planar card/mainboard. Don't let the picture fool you...}}<br />
<br />
{{WARN|There's a bug in the latest release of the security chip software. You end up facing a security chip login, and you press Ctrl-alt-delete, and it just sits there. '''Do not''' download the latest patch (Dated 13/06/2006 v 7.00.0017.00) <BR><br />
Actually, they appear to have removed that patch.<BR><br />
Ring IBM support (in Australia 131426, 1, 2) and they'll talk you through doing a system restore.}}<br />
<br />
==Trusted or Treacherous?==<br />
<br />
TC - Trusted Computing - will be the biggest change of the information landscape since decades. Besides positive features like a more secure hardware storage for cryptographic keys, an analysis of the proposed TCG-standards shows some problematic properties. <br /><br />
As ThinkPads of recent generations following the ThinkPad {{T23}} ([[Embedded Security Subsystem#Models featuring this Technology|see the complete list of models]]) are equipped with this disputed TCG-/TCPA-Technology, it can be interesting, which promises of the TCG are fulfilled inside your ThinkPad and which parts of the TCG-specifications still seem to be a privacy issue for every user of digital devices like a MP3-player or a ThinkPad - so please read [[TCPA/TCG - Trusted or Treacherous|this article]] for more details.<br />
<br />
==Linux Support==<br />
Two linux drivers are available, a [[tpm|classical one]] and a [[tpmdd|newer one]].<br />
Coverage of functionality of the first is unknown so far, the second is part of a bigger project aiming to provide a usable security framework.<br />
<br />
David Stafford (one of the developers of the tpm code at IBM) on March 10, 2005 sent me the most recent version of the tpm-kml code. With his permission, I quote his email:<br />
<br />
"I am attaching our latest driver and library.<br />
This version is in the process of kernel mailing list review, and<br />
will hopefully be accepted into the official kernel. It works<br />
much better across various 2.6 kernels. Note that this builds<br />
three modules tpm, tpm_atmel, and tpm_nsc. You modprobe the<br />
tpm_atmel (for all current shipping atmel based systems), or<br />
tpm_nsc (for the coming national based systems).<br />
<br />
Also note that there is a conflict with the snd-intel8x0<br />
kernel module (they each try to grab the LPC bus). You can<br />
either: load the tpm modules first (such as in initrd or<br />
rc.sysinit, before sound), or recompile the snd-intel8x0, turning<br />
off the MIDI and JOYSTICK support. The latest 2.6.11 version<br />
of snd-intel8x0 also reportedly fixes things."<br />
<br />
Compiling this library was easy. Compiling the driver on my 2.6.8-686 (debian testing) laptop failed. But the library works with the driver I compiled from the tpm-2.0 package IBM made available on its pages (see the links below).<br />
<br />
Gijs<br />
<br />
The T43 requires a patch posted to the LKML by Kylene Jo Hall: [http://marc.theaimsgroup.com/?l=linux-kernel&m=111884603309146&w=2 LKML posting]. An updated patch for linux 2.6.12 is available [http://shamrock.dyndns.org/~ln/linux/tpm_2.6.12.diff here].<br />
<br />
The atmel driver comes with 2.6.12.<br />
----<br />
Now suported in 2.6.15.1 (and maybe others kernels under this number) in:<br />
<br />
/device drivers/caracter devices/tpm devices<br />
<br />
==Versions & Features==<br />
=== Embedded Security Chip ===<br />
IBM introduced it's TCPA/TCG features with some of the [[:Category:T23|T23]] models. The earlier of them didn't yet have the Embedded Security Subsystem, but a kind of pre 1.0 version called the Embedded Security Chip. This chip had the following capabilities:<br />
*Data communications authentication and encryption<br />
*Storage of encrypted passwords<br />
<br />
=== Embedded Security Subsystem (1.0) ===<br />
The original Embedded Security Subsystem (in IBM documents there is no use of the additive version-number 1.0) claims to be compliant with TCG specs, but apparently did not fully implement any specific TCG spec.<br />
<br />
The Embedded Security Subsystem has the following features:<br />
*hardware key storage<br />
*multi-factor authentication<br />
*local file encryption<br />
*enhances VPN security<br />
<br />
=== Embedded Security Subsystem 2.0 ===<br />
The Embedded Security Subsystem 2.0 conforms to the TCG TPM 1.1b specification, with a TPM manufactured by either Atmel or National Semiconductor.<br />
<br />
The Embedded Security Subsystem 2.0 has the following features:<br />
*hardware key storage<br />
*multi-factor authentication<br />
*local file encryption<br />
*enhances VPN security<br />
*TCG compliant<br />
<br />
==Models featuring this Technology==<br />
===IBM Embedded Security Chip===<br />
*ThinkPad {{T23}}<br />
===IBM Embedded Security Subsystem===<br />
*ThinkPad {{A30p}}<br />
*ThinkPad {{R31}}<br />
*ThinkPad {{T23}}, {{T30}}, {{T41}}<br />
*ThinkPad {{X22}}, {{X23}}, {{X24}}<br />
<br />
===IBM Embedded Security Subsystem 2.0===<br />
*ThinkPad {{R32}}, {{R40}}, {{R50}}, {{R50p}}, {{R51}}, {{R51e}}, {{R52}}, {{R60}}<br />
*ThinkPad {{T40}}, {{T40p}}, {{T41}}, {{T41p}}, {{T42}}, {{T42p}}, {{T43}}, {{T43p}}, {{T60}}, {{T60p}}, {{T61}}<br />
*ThinkPad {{X30}}, {{X31}}, {{X32}}, {{X40}}, {{X41}}, {{X41T}}, {{X60}}, {{X60s}}, {{X61s}}<br />
*ThinkPad {{Z60m}}, {{Z60t}}<br />
[[Category:Glossary]] [[Category:Trusted Computing]]<br />
<br />
==TCPA/TCG clean models==<br />
*all models produced before 2000<br />
*all i Series models<br />
*ThinkPad [[:Category:240X|240X]]<br />
*ThinkPad [[:Category:A20m|A20m]], [[:Category:A20p|A20p]], [[:Category:A21e|A21e]], [[:Category:A21m|A21m]], [[:Category:A21p|A21p]], [[:Category:A22e|A22e]], [[:Category:A22m|A22m]], [[:Category:A22p|A22p]], [[:Category:A30|A30]]<br />
*ThinkPad [[:Category:R50e|R50e]]<br />
*ThinkPad [[:Category:T20|T20]], [[:Category:T21|T21]], [[:Category:T22|T22]]<br />
*ThinkPad [[:Category:X20|X20]], [[:Category:X21|X21]], [[:Category:X22|X22]]<br />
*ThinkPad [[:Category:TransNote|TransNote]]<br />
<br />
==External Sources==<br />
*[http://www.pc.ibm.com/us/think/thinkvantagetech/security.html IBMs ThinkVantage<sup>TM</sup> Technologies Embedded Security Subsystem page]<br />
*[http://www.pc.ibm.com/presentations/us/thinkvantage/56/index.html?shortcut=ess& IBMs ThinkVantage<sup>TM</sup> Technologies Flash presentation - Embedded Security Subsystem]<br />
*[http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page]<br />
*[http://www.prosec.rub.de/trusted_grub.html Trusted Grub]</div>CarlosPerelloMarin