ThinkWiki - User contributions [en]

Embedded Security Subsystem

2008-01-08T09:34:40Z

R5gordini: /* The Embedded Security Subsystem */

{| width="100%"
|style="vertical-align:top;padding-right:20px;width:10px;" | [[Image:ESS.jpg|IBM Embedded Security Subsystem]] __NOTOC__
|style="vertical-align:top" |
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
=== The Embedded Security Subsystem ===
The Embedded Security Subsystem is a chip on the ThinkPad's mainboard that can take care of certain security related tasks conforming to the TCPA standard. It was first introduced among the T23 models and is now under the name "Embedded Security Subsystem 2.0". It is an integral part of most of the modern ThinkPads. The functions of the chip are fall into three main groups:
* Public key functions
* Trusted boot functions
* Initialization and management functions

The purpose of the Embedded Security Subsystem is to keep the user's sensitive data out of range from software based attacks (like viruses, Internet attacks etc.). One way the chip offers to achieve this is by providing storage for keys along with the necessary functions to handle them within itself, so that a for example a private key never has to leave the chip (can't be seen by any piece of software). Besides this, there are more complex topics covered by the functionality of the chip. If you want to find out more about it you can find good documents on the [http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page].</div>
|}

{{NOTE|Some ThinkPads have the TPM chip integrated into the SuperIO chip, or soldered to the planar card/mainboard. Don't let the picture fool you...}}

{{WARN|There's a bug in the latest release of the security chip software. You end up facing a security chip login, and you press Ctrl-alt-delete, and it just sits there. '''Do not''' download the latest patch (Dated 13/06/2006 v 7.00.0017.00) <BR>
Actually, they appear to have removed that patch.<BR>
Ring IBM support (in Australia 131426, 1, 2) and they'll talk you through doing a system restore.}}

==Trusted or Treacherous?==

TC - Trusted Computing - will be the biggest change of the information landscape since decades. Besides positive features like a more secure hardware storage for cryptographic keys, an analysis of the proposed TCG-standards shows some problematic properties. <br />
As ThinkPads of recent generations following the ThinkPad {{T23}} ([[Embedded Security Subsystem#Models featuring this Technology|see the complete list of models]]) are equipped with this disputed TCG-/TCPA-Technology, it can be interesting, which promises of the TCG are fulfilled inside your ThinkPad and which parts of the TCG-specifications still seem to be a privacy issue for every user of digital devices like a MP3-player or a ThinkPad - so please read [[TCPA/TCG - Trusted or Treacherous|this article]] for more details.

==Linux Support==
Two linux drivers are available, a [[tpm|classical one]] and a [[tpmdd|newer one]].
Coverage of functionality of the first is unknown so far, the second is part of a bigger project aiming to provide a usable security framework.

David Stafford (one of the developers of the tpm code at IBM) on March 10, 2005 sent me the most recent version of the tpm-kml code. With his permission, I quote his email:

"I am attaching our latest driver and library.
This version is in the process of kernel mailing list review, and
will hopefully be accepted into the official kernel. It works
much better across various 2.6 kernels. Note that this builds
three modules tpm, tpm_atmel, and tpm_nsc. You modprobe the
tpm_atmel (for all current shipping atmel based systems), or
tpm_nsc (for the coming national based systems).

Also note that there is a conflict with the snd-intel8x0
kernel module (they each try to grab the LPC bus). You can
either: load the tpm modules first (such as in initrd or
rc.sysinit, before sound), or recompile the snd-intel8x0, turning
off the MIDI and JOYSTICK support. The latest 2.6.11 version
of snd-intel8x0 also reportedly fixes things."

Compiling this library was easy. Compiling the driver on my 2.6.8-686 (debian testing) laptop failed. But the library works with the driver I compiled from the tpm-2.0 package IBM made available on its pages (see the links below).

Gijs

The T43 requires a patch posted to the LKML by Kylene Jo Hall: [http://marc.theaimsgroup.com/?l=linux-kernel&m=111884603309146&w=2 LKML posting]. An updated patch for linux 2.6.12 is available [http://shamrock.dyndns.org/~ln/linux/tpm_2.6.12.diff here].

The atmel driver comes with 2.6.12.
----
Now suported in 2.6.15.1 (and maybe others kernels under this number) in:

/device drivers/caracter devices/tpm devices

==Versions & Features==
=== Embedded Security Chip ===
IBM introduced it's TCPA/TCG features with some of the [[:Category:T23|T23]] models. The earlier of them didn't yet have the Embedded Security Subsystem, but a kind of pre 1.0 version called the Embedded Security Chip. This chip had the following capabilities:
*Data communications authentication and encryption
*Storage of encrypted passwords

=== Embedded Security Subsystem (1.0) ===
The original Embedded Security Subsystem (in IBM documents there is no use of the additive version-number 1.0) claims to be compliant with TCG specs, but apparently did not fully implement any specific TCG spec.

The Embedded Security Subsystem has the following features:
*hardware key storage
*multi-factor authentication
*local file encryption
*enhances VPN security

=== Embedded Security Subsystem 2.0 ===
The Embedded Security Subsystem 2.0 conforms to the TCG TPM 1.1b specification, with a TPM manufactured by either Atmel or National Semiconductor.

The Embedded Security Subsystem 2.0 has the following features:
*hardware key storage
*multi-factor authentication
*local file encryption
*enhances VPN security
*TCG compliant

==Models featuring this Technology==
===IBM Embedded Security Chip===
*ThinkPad {{T23}}
===IBM Embedded Security Subsystem===
*ThinkPad {{A30p}}
*ThinkPad {{R31}}
*ThinkPad {{T23}}, {{T30}}, {{T41}}
*ThinkPad {{X22}}, {{X23}}, {{X24}}

===IBM Embedded Security Subsystem 2.0===
*ThinkPad {{R32}}, {{R40}}, {{R50}}, {{R50p}}, {{R51}}, {{R51e}}, {{R52}}, {{R60}}
*ThinkPad {{T40}}, {{T40p}}, {{T41}}, {{T41p}}, {{T42}}, {{T42p}}, {{T43}}, {{T43p}}, {{T60}}, {{T60p}}, {{T61}}, {{T61p}}
*ThinkPad {{X30}}, {{X31}}, {{X32}}, {{X40}}, {{X41}}, {{X41T}}, {{X60}}, {{X60s}}, {{X61s}}, {{X61_Tablet}}
*ThinkPad {{Z60m}}, {{Z60t}}
[[Category:Glossary]] [[Category:Trusted Computing]]

==TCPA/TCG clean models==
*all models produced before 2000
*all i Series models
*ThinkPad [[:Category:240X|240X]]
*ThinkPad [[:Category:A20m|A20m]], [[:Category:A20p|A20p]], [[:Category:A21e|A21e]], [[:Category:A21m|A21m]], [[:Category:A21p|A21p]], [[:Category:A22e|A22e]], [[:Category:A22m|A22m]], [[:Category:A22p|A22p]], [[:Category:A30|A30]]
*ThinkPad [[:Category:R50e|R50e]]
*ThinkPad [[:Category:T20|T20]], [[:Category:T21|T21]], [[:Category:T22|T22]]
*ThinkPad [[:Category:X20|X20]], [[:Category:X21|X21]], [[:Category:X22|X22]]
*ThinkPad [[:Category:TransNote|TransNote]]

==External Sources==
*[http://www.pc.ibm.com/us/think/thinkvantagetech/security.html IBMs ThinkVantage<sup>TM</sup> Technologies Embedded Security Subsystem page]
*[http://www.pc.ibm.com/presentations/us/thinkvantage/56/index.html?shortcut=ess& IBMs ThinkVantage<sup>TM</sup> Technologies Flash presentation - Embedded Security Subsystem]
*[http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page]
*[http://www.prosec.rub.de/trusted_grub.html Trusted Grub]

Embedded Security Subsystem

2008-01-08T09:34:22Z

R5gordini: Minor corrections for readability and to punctuation

{| width="100%"
|style="vertical-align:top;padding-right:20px;width:10px;" | [[Image:ESS.jpg|IBM Embedded Security Subsystem]] __NOTOC__
|style="vertical-align:top" |
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
=== The Embedded Security Subsystem ===
The Embedded Security Subsystem is a chip on the ThinkPad's mainboard that can take care of certain security related tasks conforming to the TCPA standard. It was first introduced among the T23 models and is now under the name "Embedded Security Subsystem 2.0". It is an integral part of most of the modern ThinkPads. The functions of the chip are fall into three main groups:
* public key functions
* trusted boot functions
* initialization and management functions

The purpose of the Embedded Security Subsystem is to keep the user's sensitive data out of range from software based attacks (like viruses, Internet attacks etc.). One way the chip offers to achieve this is by providing storage for keys along with the necessary functions to handle them within itself, so that a for example a private key never has to leave the chip (can't be seen by any piece of software). Besides this, there are more complex topics covered by the functionality of the chip. If you want to find out more about it you can find good documents on the [http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page].</div>
|}

{{NOTE|Some ThinkPads have the TPM chip integrated into the SuperIO chip, or soldered to the planar card/mainboard. Don't let the picture fool you...}}

{{WARN|There's a bug in the latest release of the security chip software. You end up facing a security chip login, and you press Ctrl-alt-delete, and it just sits there. '''Do not''' download the latest patch (Dated 13/06/2006 v 7.00.0017.00) <BR>
Actually, they appear to have removed that patch.<BR>
Ring IBM support (in Australia 131426, 1, 2) and they'll talk you through doing a system restore.}}

==Trusted or Treacherous?==

TC - Trusted Computing - will be the biggest change of the information landscape since decades. Besides positive features like a more secure hardware storage for cryptographic keys, an analysis of the proposed TCG-standards shows some problematic properties. <br />
As ThinkPads of recent generations following the ThinkPad {{T23}} ([[Embedded Security Subsystem#Models featuring this Technology|see the complete list of models]]) are equipped with this disputed TCG-/TCPA-Technology, it can be interesting, which promises of the TCG are fulfilled inside your ThinkPad and which parts of the TCG-specifications still seem to be a privacy issue for every user of digital devices like a MP3-player or a ThinkPad - so please read [[TCPA/TCG - Trusted or Treacherous|this article]] for more details.

==Linux Support==
Two linux drivers are available, a [[tpm|classical one]] and a [[tpmdd|newer one]].
Coverage of functionality of the first is unknown so far, the second is part of a bigger project aiming to provide a usable security framework.

David Stafford (one of the developers of the tpm code at IBM) on March 10, 2005 sent me the most recent version of the tpm-kml code. With his permission, I quote his email:

"I am attaching our latest driver and library.
This version is in the process of kernel mailing list review, and
will hopefully be accepted into the official kernel. It works
much better across various 2.6 kernels. Note that this builds
three modules tpm, tpm_atmel, and tpm_nsc. You modprobe the
tpm_atmel (for all current shipping atmel based systems), or
tpm_nsc (for the coming national based systems).

Also note that there is a conflict with the snd-intel8x0
kernel module (they each try to grab the LPC bus). You can
either: load the tpm modules first (such as in initrd or
rc.sysinit, before sound), or recompile the snd-intel8x0, turning
off the MIDI and JOYSTICK support. The latest 2.6.11 version
of snd-intel8x0 also reportedly fixes things."

Compiling this library was easy. Compiling the driver on my 2.6.8-686 (debian testing) laptop failed. But the library works with the driver I compiled from the tpm-2.0 package IBM made available on its pages (see the links below).

Gijs

The T43 requires a patch posted to the LKML by Kylene Jo Hall: [http://marc.theaimsgroup.com/?l=linux-kernel&m=111884603309146&w=2 LKML posting]. An updated patch for linux 2.6.12 is available [http://shamrock.dyndns.org/~ln/linux/tpm_2.6.12.diff here].

The atmel driver comes with 2.6.12.
----
Now suported in 2.6.15.1 (and maybe others kernels under this number) in:

/device drivers/caracter devices/tpm devices

==Versions & Features==
=== Embedded Security Chip ===
IBM introduced it's TCPA/TCG features with some of the [[:Category:T23|T23]] models. The earlier of them didn't yet have the Embedded Security Subsystem, but a kind of pre 1.0 version called the Embedded Security Chip. This chip had the following capabilities:
*Data communications authentication and encryption
*Storage of encrypted passwords

=== Embedded Security Subsystem (1.0) ===
The original Embedded Security Subsystem (in IBM documents there is no use of the additive version-number 1.0) claims to be compliant with TCG specs, but apparently did not fully implement any specific TCG spec.

The Embedded Security Subsystem has the following features:
*hardware key storage
*multi-factor authentication
*local file encryption
*enhances VPN security

=== Embedded Security Subsystem 2.0 ===
The Embedded Security Subsystem 2.0 conforms to the TCG TPM 1.1b specification, with a TPM manufactured by either Atmel or National Semiconductor.

The Embedded Security Subsystem 2.0 has the following features:
*hardware key storage
*multi-factor authentication
*local file encryption
*enhances VPN security
*TCG compliant

==Models featuring this Technology==
===IBM Embedded Security Chip===
*ThinkPad {{T23}}
===IBM Embedded Security Subsystem===
*ThinkPad {{A30p}}
*ThinkPad {{R31}}
*ThinkPad {{T23}}, {{T30}}, {{T41}}
*ThinkPad {{X22}}, {{X23}}, {{X24}}

===IBM Embedded Security Subsystem 2.0===
*ThinkPad {{R32}}, {{R40}}, {{R50}}, {{R50p}}, {{R51}}, {{R51e}}, {{R52}}, {{R60}}
*ThinkPad {{T40}}, {{T40p}}, {{T41}}, {{T41p}}, {{T42}}, {{T42p}}, {{T43}}, {{T43p}}, {{T60}}, {{T60p}}, {{T61}}, {{T61p}}
*ThinkPad {{X30}}, {{X31}}, {{X32}}, {{X40}}, {{X41}}, {{X41T}}, {{X60}}, {{X60s}}, {{X61s}}, {{X61_Tablet}}
*ThinkPad {{Z60m}}, {{Z60t}}
[[Category:Glossary]] [[Category:Trusted Computing]]

==TCPA/TCG clean models==
*all models produced before 2000
*all i Series models
*ThinkPad [[:Category:240X|240X]]
*ThinkPad [[:Category:A20m|A20m]], [[:Category:A20p|A20p]], [[:Category:A21e|A21e]], [[:Category:A21m|A21m]], [[:Category:A21p|A21p]], [[:Category:A22e|A22e]], [[:Category:A22m|A22m]], [[:Category:A22p|A22p]], [[:Category:A30|A30]]
*ThinkPad [[:Category:R50e|R50e]]
*ThinkPad [[:Category:T20|T20]], [[:Category:T21|T21]], [[:Category:T22|T22]]
*ThinkPad [[:Category:X20|X20]], [[:Category:X21|X21]], [[:Category:X22|X22]]
*ThinkPad [[:Category:TransNote|TransNote]]

==External Sources==
*[http://www.pc.ibm.com/us/think/thinkvantagetech/security.html IBMs ThinkVantage<sup>TM</sup> Technologies Embedded Security Subsystem page]
*[http://www.pc.ibm.com/presentations/us/thinkvantage/56/index.html?shortcut=ess& IBMs ThinkVantage<sup>TM</sup> Technologies Flash presentation - Embedded Security Subsystem]
*[http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page]
*[http://www.prosec.rub.de/trusted_grub.html Trusted Grub]

Embedded Security Subsystem

2008-01-08T09:31:58Z

R5gordini:

{| width="100%"
|style="vertical-align:top;padding-right:20px;width:10px;" | [[Image:ESS.jpg|IBM Embedded Security Subsystem]] __NOTOC__
|style="vertical-align:top" |
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
=== The Embedded Security Subsystem ===
The Embedded Security Subsystem is a chip on the ThinkPad's mainboard that can take care of certain security related tasks conforming to the TCPA standard. It was first introduced among the T23 models and is now under the name Embedded Security Subsystem 2.0 an integral part of most of the modern ThinkPads. The functions of the chip are fall into three main groups:
* public key functions
* trusted boot functions
* initialization and management functions

The purpose of the whole thing is to keep the user's sensitive data out of range from software based attacks (like viruses, internet attacks etc.). One way the chip offers to achieve this is by providing storage for keys along with the neccessary functions to handle them within itself, so that a for example a private key never has to leave the chip (can't be seen by any piece of software). Besides this, there are more complex topics covered by the functionality of the chip. If you want to find out more about it you can find good documents on the [http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page].</div>
|}

{{NOTE|Some ThinkPads have the TPM chip integrated into the SuperIO chip, or soldered to the planar card/mainboard. Don't let the picture fool you...}}

{{WARN|There's a bug in the latest release of the security chip software. You end up facing a security chip login, and you press Ctrl-alt-delete, and it just sits there. '''Do not''' download the latest patch (Dated 13/06/2006 v 7.00.0017.00) <BR>
Actually, they appear to have removed that patch.<BR>
Ring IBM support (in Australia 131426, 1, 2) and they'll talk you through doing a system restore.}}

==Trusted or Treacherous?==

TC - Trusted Computing - will be the biggest change of the information landscape since decades. Besides positive features like a more secure hardware storage for cryptographic keys, an analysis of the proposed TCG-standards shows some problematic properties. <br />
As ThinkPads of recent generations following the ThinkPad {{T23}} ([[Embedded Security Subsystem#Models featuring this Technology|see the complete list of models]]) are equipped with this disputed TCG-/TCPA-Technology, it can be interesting, which promises of the TCG are fulfilled inside your ThinkPad and which parts of the TCG-specifications still seem to be a privacy issue for every user of digital devices like a MP3-player or a ThinkPad - so please read [[TCPA/TCG - Trusted or Treacherous|this article]] for more details.

==Linux Support==
Two linux drivers are available, a [[tpm|classical one]] and a [[tpmdd|newer one]].
Coverage of functionality of the first is unknown so far, the second is part of a bigger project aiming to provide a usable security framework.

David Stafford (one of the developers of the tpm code at IBM) on March 10, 2005 sent me the most recent version of the tpm-kml code. With his permission, I quote his email:

"I am attaching our latest driver and library.
This version is in the process of kernel mailing list review, and
will hopefully be accepted into the official kernel. It works
much better across various 2.6 kernels. Note that this builds
three modules tpm, tpm_atmel, and tpm_nsc. You modprobe the
tpm_atmel (for all current shipping atmel based systems), or
tpm_nsc (for the coming national based systems).

Also note that there is a conflict with the snd-intel8x0
kernel module (they each try to grab the LPC bus). You can
either: load the tpm modules first (such as in initrd or
rc.sysinit, before sound), or recompile the snd-intel8x0, turning
off the MIDI and JOYSTICK support. The latest 2.6.11 version
of snd-intel8x0 also reportedly fixes things."

Compiling this library was easy. Compiling the driver on my 2.6.8-686 (debian testing) laptop failed. But the library works with the driver I compiled from the tpm-2.0 package IBM made available on its pages (see the links below).

Gijs

The T43 requires a patch posted to the LKML by Kylene Jo Hall: [http://marc.theaimsgroup.com/?l=linux-kernel&m=111884603309146&w=2 LKML posting]. An updated patch for linux 2.6.12 is available [http://shamrock.dyndns.org/~ln/linux/tpm_2.6.12.diff here].

The atmel driver comes with 2.6.12.
----
Now suported in 2.6.15.1 (and maybe others kernels under this number) in:

/device drivers/caracter devices/tpm devices

==Versions & Features==
=== Embedded Security Chip ===
IBM introduced it's TCPA/TCG features with some of the [[:Category:T23|T23]] models. The earlier of them didn't yet have the Embedded Security Subsystem, but a kind of pre 1.0 version called the Embedded Security Chip. This chip had the following capabilities:
*Data communications authentication and encryption
*Storage of encrypted passwords

=== Embedded Security Subsystem (1.0) ===
The original Embedded Security Subsystem (in IBM documents there is no use of the additive version-number 1.0) claims to be compliant with TCG specs, but apparently did not fully implement any specific TCG spec.

The Embedded Security Subsystem has the following features:
*hardware key storage
*multi-factor authentication
*local file encryption
*enhances VPN security

=== Embedded Security Subsystem 2.0 ===
The Embedded Security Subsystem 2.0 conforms to the TCG TPM 1.1b specification, with a TPM manufactured by either Atmel or National Semiconductor.

The Embedded Security Subsystem 2.0 has the following features:
*hardware key storage
*multi-factor authentication
*local file encryption
*enhances VPN security
*TCG compliant

==Models featuring this Technology==
===IBM Embedded Security Chip===
*ThinkPad {{T23}}
===IBM Embedded Security Subsystem===
*ThinkPad {{A30p}}
*ThinkPad {{R31}}
*ThinkPad {{T23}}, {{T30}}, {{T41}}
*ThinkPad {{X22}}, {{X23}}, {{X24}}

===IBM Embedded Security Subsystem 2.0===
*ThinkPad {{R32}}, {{R40}}, {{R50}}, {{R50p}}, {{R51}}, {{R51e}}, {{R52}}, {{R60}}
*ThinkPad {{T40}}, {{T40p}}, {{T41}}, {{T41p}}, {{T42}}, {{T42p}}, {{T43}}, {{T43p}}, {{T60}}, {{T60p}}, {{T61}}, {{T61p}}
*ThinkPad {{X30}}, {{X31}}, {{X32}}, {{X40}}, {{X41}}, {{X41T}}, {{X60}}, {{X60s}}, {{X61s}}, {{X61_Tablet}}
*ThinkPad {{Z60m}}, {{Z60t}}
[[Category:Glossary]] [[Category:Trusted Computing]]

==TCPA/TCG clean models==
*all models produced before 2000
*all i Series models
*ThinkPad [[:Category:240X|240X]]
*ThinkPad [[:Category:A20m|A20m]], [[:Category:A20p|A20p]], [[:Category:A21e|A21e]], [[:Category:A21m|A21m]], [[:Category:A21p|A21p]], [[:Category:A22e|A22e]], [[:Category:A22m|A22m]], [[:Category:A22p|A22p]], [[:Category:A30|A30]]
*ThinkPad [[:Category:R50e|R50e]]
*ThinkPad [[:Category:T20|T20]], [[:Category:T21|T21]], [[:Category:T22|T22]]
*ThinkPad [[:Category:X20|X20]], [[:Category:X21|X21]], [[:Category:X22|X22]]
*ThinkPad [[:Category:TransNote|TransNote]]

==External Sources==
*[http://www.pc.ibm.com/us/think/thinkvantagetech/security.html IBMs ThinkVantage<sup>TM</sup> Technologies Embedded Security Subsystem page]
*[http://www.pc.ibm.com/presentations/us/thinkvantage/56/index.html?shortcut=ess& IBMs ThinkVantage<sup>TM</sup> Technologies Flash presentation - Embedded Security Subsystem]
*[http://www.research.ibm.com/gsal/tcpa/ IBM Research TCPA resources page]
*[http://www.prosec.rub.de/trusted_grub.html Trusted Grub]

Buyers Guide

2008-01-07T14:38:30Z

R5gordini: /* Build it yourself and save money */

{| width="100%"
|style="vertical-align:top;padding-right:20px;width:10px;white-space:nowrap;" | __TOC__
|style="vertical-align:top" |
This page is dedicated to hints about buying used or new ThinkPad models. You can find notes about typical weaknesses of used ThinkPads here and other things you should care about when choosing a ThinkPad and where to buy it.
|}
==Build it yourself and save money==
Lenovo offers more flexibility than any other major manufacturer of laptop computers, at least that I know of. Their "configure-to-order" (CTO) offerings let you build the computer you want, without paying for anything you don't want. The basic CTO includes the mainboard and CPU, but no RAM, disk, mini-PCI cards, software, or other add-ons. You can even get a laptop in a CTO configuration.

I built my {{X32}} notebook with 1GB RAM, 60GB 5400RPM hard drive, USB DVD-ROM CD-RW drive, and 802.11a/b/g mini-PCI for a grand total of US$1,206, including tax and shipping.

Start with the complete list of [https://www-03.ibm.com/lenovo/shop/personalpages/public/public/products/dsp_product_list.cfm products]. Look for items that end with "CTO" or "Custom." Choose the chassis you want. Then add whatever [http://www-132.ibm.com/content/home/store_IBMPublicUSA/en_US/Upgrades.html upgrades] you need that only Lenovo offers (such as WiFi). Fill in the rest of the components from other, less expensive vendors.

Update: you can't do this these days. They will not sell you a CTO barebone. At least you can't do it online. You might have to 'con' a sales agent.

Response to update: I did not need to con anyone. I just ordered the CTO chassis and the parts I needed from their website. I placed the order on August 18, 2005 and received all the shipments by August 26, 2005.

Comment from visitor: [https://www-03.ibm.com/lenovo/shop/personalpages/public/public/products/dsp_feature_product.cfm?display=main&cat_id=24 Try this page]. You can at least get a Z60 with the titanium cover in a more stripped down model than is otherwise available.

==Various deals==

Special prices: You can get a laptop from Lenovo for special price if you are a student, alumni, researcher
or something like that. You need to go to education -> computers for home -> students (or such), and
now click on "My Account" to create a new account. Perhaps there is another way, but you must end up with a student
account. Then you get around 5% off the web price.

You can also buy a Lenovo thinkpad pre-configured with Linux from [http://www.linuxcertified.com/linux-laptop-lctp60.html here]

The [https://www.directlenovo.com/public/ Lenovo USA sales web site] offers some attractive deals in its [http://www.directlenovo.com/public/public/search/dsp_product_features.cfm?category=9953&featured_display=Template surplus outlet].

IBM sells [http://www-132.ibm.com/webapp/wcs/stores/servlet/CategoryDisplay?storeId=1&catalogId=-840&langId=-1&categoryId=2576396 refurbished ThinkPads].

== Special deals for certain customer groups ==
IBM makes huge discounts to students and teachers:
{| border="1" cellspacing="0" cellpadding="2" style="text-align:left;"
! country !! shops & target groups
|-
| Austria ||
* [http://www.studentline.at/ Studentline.at] (students, university staff, pupils and teachers)
* [http://www.notebook4u.at/ notebook4u.at] (students, university staff, pupils and teachers)
* [http://www.abax.at/academic/ ABAX] (students, university staff, pupils and teachers)
* [http://www.bostelmann.com/ Computer Bostelmann] (students, university staff, pupils and teachers)
|- style="vertical-align:top;"
| France ||
*[http://www.ibm.com/easyaccess/education IBM education homepage]
|- style="vertical-align:top;"
| Germany ||
*[http://www.notebooksbilliger.de notebooksbilliger.de] (pupils, students)
*[http://www.lapstars.de lapstars.de] (students, university staff, pupils and teachers)
*[http://www.ok1.de ok1] (students, university staff, pupils and teachers)
*[http://campuspoint.de campuspoint] (students, university staff, pupils and teachers)
*[http://www.campusrabatt.de/index.php ADD Datensysteme: CampusRabatt] (students, university staff, pupils and teachers)
*[http://www.pro-com.org pro-com Datensysteme]:
**[http://www.pro-com.org/b2b pro-com b2b] (businesses)
**[http://www.nofost.de/ NOFOST] (students & university staff)
**[http://www.no4ed.de/ NOFOED] (pupils & teachers)
**[http://www.nofoch.de/ NOFOCH] (clinics and medical institutions and their staff)
**[http://www.pro-com.org/lf pro-com luf] (universities, schools & other educational and research institutes)
|- style="vertical-align:top;"
| Switzerland ||
*[http://www.rabais-etudiant.ch/ Rabais-Etudiant] (students, teachers, schools)
*[http://www.studentenrabatt.ch/ Studentenrabatt] (students, teachers, schools)
|- style="vertical-align:top;"
| United States ||
* [http://www.pc.ibm.com/us/education/ Education] (K-12 and Higher Education)
* [http://www.dealmine.com/search_by_product.php?s=thinkpad Comparison shop] at DealMine.com to find Thinkpad and membership discounts [http://www.dealmine.com/deals_from/Union_Plus/23 AFL-CIO/AFT] matched up at various stores
* IBM Employee Purchase Program (EPP) for IBM employees and their family and friends: [http://www.ibm.com/shop/us/epp/ IBM store] / [http://shoplenovo.i2.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=eppibm Lenovo store]
* Corporate Perks program for corporate employees (e.g., accessible through the Microsoft Alumni Network)
|}

== Buying FRUs ==

You can buy single components, called, FRU (Field Replacement Unit), directly from Lenovo.

* US orders: https://www-132.ibm.com/content/home/store_IBMPublicUSA/en_US/parts/parts_r.html
* Other countries: http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-50278&sitestyle=lenovo

To find the right FRU, you can look up your model's part lists here:
* [http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=TPAD-FRU Service parts list index - ThinkPad General]

== Official list of linux certified computers ==

* A [http://www.lenovo.com/pc/support/site.wss/MIGR-48NT8D.html list] of completed Linux certifications on [http://www.lenovo.com lenovo web site]

==Where to by Linux preinstalled thinkpad==
* [http://laclinux.com/en/Laptop Los Alamos Computers] Custom Linux Thinkpads - T Series, Z Series, X Series 23 Apr 2007

== Buying on eBay ==
* Many sellers do not know exactly what they have. Get the full 7-digit machine type if at all possible. Compare it to the specifications in the *book.pdf series: twbook.pdf, tabook.pdf, tawbook.pdf, etc, to determine actual screen size, original CPU speed, original hard disk, etc.
* You can try getting the serial number as well to check the warranty status at IBMs support pages.
* Check completed auctions carefully to determine going prices for comparable machines.
* Be aware if any port covers are missing. If they are, see if any current auctions are running to check availability.
* If the unit doesn't come with a hard drive, know whether it has the caddy and cover. Make sure that the three passwords are NOT set or that you know the right passwords before you install your hard drive! If you don't: A password can be set into your hard disk automatically, making it a brick - useful for door stopping only!
* Anything with a PIII or later most likely came with a Windows Certificate of Authenticity. Find out whether the listed machine does. Even if you don't want it, it may help resale value when you '''sell''' the machine.
* Read the feedback of the seller on items he has sold, especially electronics, computers and laptops. If meangranny is suddenly selling T43's after three years of lace, stay away.
* If it seems too good to be true, it probably is. There's a reason no one else is bidding on it.

==Long-time Weaknesses of certain models==
{| border="1" cellspacing="0" cellpadding="2"
! Model !! Issues
|-
| {{390X}} || *models with 15" display are said to have weak display cables that tend to break.
|-
| {{600X}} || Battery problems.
|-
||{{A20p}}, {{390}}, {{390E}}, {{390X}} || *Base cover corners are prone to crack, root cause stiff display hinges
|-
||{{A31}} || Several reports of [[Problem with garbled screen]] independent on Operating System
|-
| {{A30}}, {{A30p}}, {{A31}}, {{A31p}} || *seem to have a mechanical design that can cause the motherboard to break. At least there are a significant number of reports of broken motherboards on these models.
|-
| {{T30}} || *had a problem with memory sockets detaching from the system board. IBM replaced these free of charge even after warranties expired.
|-
| {{T20}} || Many models have a problem of gradually dying. Attempting to turn on will only cause a blinking light, and many attempts must be made in order to start the machine. Eventually, the machine is no longer bootable.
|-
| {{X40}} || Your 1.8" hard drive will die after about a year. [[Talk:Harddisk_Drives]]
|-
| {{X61_Tablet}}|| The screen bezel unglues away the LCD screen, leaving an ugly gap. See the [http://forum.thinkpads.com/viewtopic.php?t=47509 forum discussion].
|-
| {{T43}} || A number of laptops from the T-line are very thin (everything since {{T40}}?), which was to some degree possible by using the newer [[UltraBay|UltraBay Slim]], which is used in almost all Thinkpads now, instead of the old [[UltraBay|UltraBay Plus]]. This limits the available alternatives for optical drives, as they are not compatible with the industrial standard slimline drives, which are to thick. Some {{T43}}s have Matshita UJ-822S drives, and Matshita is infamous for striving extra to enforce the DVD regional codes. Purchasing such a laptop would effectively mean being locked to one DVD region, unless you can buy a compatible replacement DVD drive. The {{T43}} family is also notorious for its [[problem with fan noise]] and has a [[problem with non-ThinkPad hard disks]]; its predecessor, the {{T42}} family, had none of these problems and offered better battery life.
|}

Active Protection System

2008-01-07T14:23:34Z

R5gordini: /* The Active Protection System */

{| width="100%"
|style="vertical-align:top;padding-right:20px;width:10px;" | [[Image:APS.jpg|IBM Active Protection System]] __NOTOC__
|style="vertical-align:top" |
<div style="margin: 0; margin-right:10px; border: 1px solid #dfdfdf; padding: 0em 1em 1em 1em; background-color:#F8F8FF; align:right;">
=== The Active Protection System ===
With the new series of ThinkPads IBM introduced the Active Protection System (APS) in 2003. The APS is a protection system for the ThinkPad's internal harddrive. A sensor inside the ThinkPad recognizes when the notebook is accelerated. A software applet then is triggered to park the harddisk. This way the risk of data loss in case of when the notebook is dropped is significantly reduced since the read/write head of the harddrive is parked and hence can't crash onto the platter when the notebook drops onto the floor.

The hardware sensor is capable of not only recognizing acceleration of the notebook, but also (to a certain degree) of its whole orientation in space, relative to gravity's axis. Furthermore, having the actual control put into software, its functionality is extendable and it gives chance to implement features like the "ignore minor shocks" feature which is present in the Windows based control applet. (This feature prevents the harddrive from parking in case of minor regular shocks such as occur when in a train or car.)

The measurements are physically performed by an [[Analog Devices ADXL320 accelerometer]] chip, managed by the [[Embedded Controller Chips|embedded controller]].
</div>
|}

* [ftp://ftp.software.ibm.com/pc/pccbbs/mobiles_pdf/aps2mst.pdf IBM Active Protection System Whitepaper]

==Hard-disk Support==

HD-APS requires a hard-disk with [http://www.hitachigst.com/hdd/research/storage/hdi/loadunload.html head unload ramp technology] and also support on the hard-disk firmware to unload heads without flushing the disk cache. This is required, because as soon as the APS system detects a shock is imminent, the system has less than 500ms to prepare for the shock.

Unloading heads without flushing the cache is done using the [http://www.t13.org/Documents/UploadedDocuments/docs2003/e03120r5.pdf optional Unload Immediate feature of the IDLE IMMEDIATE ATA command]. It finishes whatever sector write is in-flight, and immediately moves the heads to the unload ramp. Without this command, hard-disk APS cannot be trusted, as disks with big caches can take a lot of time to write it all to disk.

So far, only hard-disks with IBM APS firmware, as well as the consumer Fujitsu HV2060AH/MHV2100AH/MHV2120AH HDs have been found to implement all the necessary functions. Head unload technology is reasonably common in modern laptop disks, but the APS firmware is very rare in regular consumer products. Please note that newer Apple notebooks also support APS, so it is somewhat likely that their disks also support unload immediate or a similar feature.

==Linux Support==
Linux support is in development.

This feature definitely depends on software and there is no hardware or BIOS only way of making it work.
IBM made contradictory statements about their willingness to release the specifications of the hardware sensor and its API to the linux community or some developers. Although a lot of developers and other interested people from the OpenSource community actively contacted IBM to get the specs, in fact they never got them.

However, after first efforts of [http://www.kernelthread.com/software/ams/ Amit Singh on a PowerBook] and [http://www.almaden.ibm.com/cs/people/marksmith/tpaps.html Mark Smith on a ThinkPad], the [[HDAPS]] project was founded to produce a linux kernel driver for the acceleration sensor and a user space application to monitor it. Later, a kernel patch to enable harddisk parking followed.

See [[How to protect the harddisk through APS]] for instructions and [[Problem with APS harddisk parking]] for Troubleshooting.

Furthermore, a list of alternative applications like theft alarm and others can be found on the [[HDAPS]] driver page.

==Tilt detection field tests==
Using Perl code for WinXP:
<pre>
use Win32API::File qw(:ALL);
sub get_tilt {
my $file = createFile("//./ShockMgr", "r ke") or die "Can't get ShockMgr device";
DeviceIoControl($file, 0x733fc, [], 0, my($buf), 0x24, my($bytes), []);
my @data = unpack "x4s*", $buf;
return @data[1, 0];
}
</pre>
my T42 gives values of roughly 490 when at rest in normal upright position with base parallel to the ground. As I gently tilt the T42 through all possible x or y angles, the values range from about 335-645, meaning a resolution of about 155 units per Earth gravity. This seems to suggest that the operating range of the APS is actually about +-3 gs, although the ADXL320 is supposed to allow +-5 gs.

As the tilt angle is the arcsine of the normalized APS reading, the Thinkpad is most tilt sensitive when in a normal upright position with base parallel to the ground. In this position, the tilt resolution is about 0.35 - 0.4 degrees. At maximum tilt, the resolution is much worse, about 6.5 degrees.

Shouldn't matter much, but my tests are at an elevation of about 60 meters above sea level.

===More field tests===
When placed on a reasonably flat and reasonably horizontal work surface my T43 provides readings of about x=503 and y=569. I wrote a command-line application in C# (using the .NET DllImport annotation to access the sensor.dll API) to log the sensor readings at some interval. With 150ms sampling I found the following extreme values: 335 to 654 for x, and 409 to 723 for y.

<pre>
x: 494.5 +/- 159.5
y: 566.0 +/- 157.0
</pre>

Based on the maximum and minimum x and y readings I calculated the above "zero" and range values in order to convert the sensor readings to degrees and wrapped this up in a small graphical application for Windows. My data, source code, executables and a complete description can be found [http://www.stanford.edu/~bsuter/thinkpad-accelerometer/ here].

==Related Links==
*[http://www.stanford.edu/~bsuter/thinkpad-accelerometer/ Sensor Data, Calibration, command-line and GUI executables for Windows and C# .NET source code]
*[http://www.pc.ibm.com/presentations/us/thinkvantage/56/index.html?shortcut=aps& IBMs ThinkVantage™ Technologies Flash presentation - Active Protection System]
*[http://www-128.ibm.com/developerworks/linux/library/l-knockage.html?ca=dgr-lnxw01Knock-Knock IBM HDAPS/Linux HDAPS information page]
*[http://hdaps.sourceforge.net HDAPS project page]
*[http://sourceforge.net/mailarchive/forum.php?forum=hdaps-devel HDAPS-devel list archive]

==Models featuring this Technology==
*ThinkPad {{R50}}, {{R50p}}, {{R51}}, {{R52}}, {{R60}}, {{R61}}
*ThinkPad {{T41}}, {{T41p}}, {{T42}}, {{T42p}}, {{T43}}, {{T43p}}, {{T60}}, {{T60p}}, {{T61}}, {{T61p}}
*ThinkPad {{X40}}, {{X41}}, {{X41_Tablet}}, {{X60}}, {{X60s}}, {{X60_Tablet}}, {{X61}}, {{X61s}}, X61 Tablet
*ThinkPad {{Z60m}}, {{Z60t}}, {{Z61m}}, {{Z61t}}, {{Z61e}}

[[Category:Glossary]]

Talk:Problem with failing memory slot

2008-01-07T13:26:06Z

R5gordini: /* Soldering experiences */

Can anyone confirm that this solution works? Why a strip of metal (Could cardboard or some other material be used)? What size of an object is needed to make the RAM connect?

Can the person who wrote it confirm it? I have done it 2x, and have a few pictures. Perhaps Ill post them on my site later today. The first time, I used a strip of metal, and the second time, I used a tightly rolled up piece of paper. The paper method turned out to be more stable, as the metal caused the door to warp a bit. --breaklog

OK, I have not been able to get the pictures I took (at least not yet), but I did find someone else who did something similar, with a rolled up piece of paper this past may on thinkpads.com. [http://forum.thinkpads.com/viewtopic.php?t=13262&postdays=0&postorder=asc&start=30&sid=d4be04d5b8a2cfbc88fed78d01135581 Link] --[[User:Breaklog|Breaklog]] 02:55, 8 October 2006 (CEST)

== Confirming ==

With the second slot failing after some time / inserting new Ram-module this solution worked out for me fine. I rolled a piece of paper max 2mm and placed it in the middle of the module parallel to the slot. make it thin enough so you don't press it to hard, and make it small enough because of ventilation.

== Soldering experiences ==

I was able to resolder my secondary memory slot which had failed. I did it with a standard hobbyist 25w soldering iron with a small(ish) tip. Using the very end of the tip, I was able to exert moderate pressure on each pin and resolder it to the board. I added no extra solder and I did not use flux. Initially, on refitting, the laptop didn't work (I'd shorted a couple of pins). After fixing this, it booted and worked. Prior to effecting this repair I had found that putting pressure on a DIMM made it work more reliably, so while I was resoldering the pins of the socket I also resoldered the supports, and put some pressure on them to push them down into the board a little (if possible). Time will tell if this is a reliable, long-term solution, but it has worked for me so far. [[User:R5gordini|R5gordini]] 14:26, 7 January 2008 (CET)

Talk:Problem with failing memory slot

2008-01-07T13:25:48Z

R5gordini:

Known Problems

2008-01-07T13:20:21Z

R5gordini: /* Misc Problems */ Added link to failing memory slot (T30)

{| width="100%"
|style="vertical-align:top;padding-right:20px;width:10px;white-space:nowrap;" | __TOC__
|style="vertical-align:top" |
Information on known problems with certain ThinkPad models.
|}
==Display Problems==
*[[Problem with unusable console | Console unusable]] <tt>(models with savage video chipset: T2x, A22e)</tt>
*[[Problem with Pixel Error | Dead pixels on TFT displays]] <tt>(all models)</tt>
*[[Problem with DVI throughput | DVI throughput on port replicators and docks]] <tt>(models from 2000-2004)</tt>
*[[Problems with fglrx | fglrx problems]] <tt>(ATI Radeon models)</tt>
*[[Problem with garbled screen | Garbled Screen]] <tt>(T40, T41, T42, R32, R40, R50p, R51, A30, A31, A31p)</tt>
*[[Problem with broken inverter | Inverter broken]] <tt>(all models)</tt>
*[[Problem with key and trackpoint markings on the display | Key and Trackpoint markings on display]]
*[https://bugs.freedesktop.org/show_bug.cgi?id=2187 Radeon 7500 "DynamicClocks" randomly hangs] <tt>(TP T4x, Xorg-X11 bug report)</tt>
*[[Problem with red display shadow | Red shadow on display]] <tt>(TP T41p)</tt>
*[[Problem with red tinted display | Red tinted display]] <tt>(TP 23)</tt>
*[[Problem with black X | Unmovable square black X in X]] <tt>(TP T2x)</tt>
*[[Problem with video related system lockup | System Lockups related to video adapter]] <tt>(TP T2x)</tt>
*[[Problem with video related system lockup II | System Lockups related to video adapter T42]] <tt>(TP T42, T42p)</tt>
*[[Problem with ati driver in xorg 6.9.x | System lockup soon after starting xorg 6.9.x ]] <tt>(TP T4x)</tt>
*[[Problem with video output switching | Video output switching]]
*[[Problem with LCD brightness buttons | Video brightness up keys don't work or cause crashes]]

==Harddisk Drive related Problems==
*[[Problem with APS harddisk parking|APS harddisk parking]] <tt>(models featuring APS)</tt>
*[[Problem with too large harddrive|BIOS hangs with harddrive sized over 8G]] <tt>(560)</tt>
*[[Problem with hard drive clicking | Clicking Hard Drive]] <tt>(models with Hitachi's 5k80 hard drive)</tt>
*[[Problem with non-ThinkPad hard disks|Non-ThinkPad hard disks]] <tt>(T43, X41, R52)</tt>
*[[Problems with SATA and Linux|SATA and Linux]] <tt>(T43, X41, R52, Z60)</tt>

==Network Problems==
*[[Problem with 3Com 10/100 Ethernet card not being recognized|3Com 10/100 Ethernet card not recognized]] <tt>(models with that card)</tt>
*[[Problem with unauthorized MiniPCI network card|"Unauthorized" MiniPCI Wireless Network card error (Error 1802)]] <tt>(Recent TPs)</tt>
*[[Cisco Aironet Wireless 802.11b]] fails to work with certain firmware versions
*[[Problem with error 01C9 - More than one Ethernet devices | Error 01C9: More than one Ethernet Devices are found (Atheros WLAN MiniPCI)]] <tt>(T23, T30, A31p, R40 and others)</tt>
*[[Problem with e1000: EEPROM Checksum Is Not Valid]] <tt>(T60, X60, may be others)</tt>
*[[Problem with e1000: 99.9% packet loss on 7.x drivers]] <tt>(Recent TPs)</tt>
*[[Problem with 3945ABG: Internal wifi cannot associate with AP]] <tt>(T60, probably others)</tt>
*[[Need to disable V90/V92/56K modem speed]] ([[IBM_Integrated_Bluetooth_III_with_56K_Modem_(BMDC-2)|BMDC-2]] on X40)

==Power Management, AC-adapter or Battery Problems==
*[[Problem with ThinkPad 600 batteries | 600 series Battery dying prematurely]] <tt>(TP 600/E/X)</tt>
*[[Damage in 56W AC-Adapter, plastic housing melted |AC-Adapter damaged, plastic housing melted]] <tt>(240, 390, i and s models)</tt>
*[[Problems with ACPI suspend-to-ram|ACPI suspend-to-ram]] <tt>(ACPI sleep troubles)</tt>
**[[Problem with display remaining black after resume|Blank display after resume]] <tt>(various models)</tt>
**[[Problem with high power drain in ACPI sleep | High power drain in ACPI sleep]] <tt>(various models)</tt>
**[[Problem with LCD backlight remaining on during ACPI sleep | LCD backlight remaining on during ACPI sleep]] <tt>(various models)</tt>
*[[Problem with fan noise | Fan noise]] <tt>(TP T4x/p, TP R5x/p)</tt>
*[[Problem with checking battery status | Checking battery status causes mouse to jerk around]] <tt>(R31)</tt>
*[[Battery drains despite seemingly being charged]] <tt>(A/C adapter issues)</tt>
*[[Problem with high pitch noises | High pitch noises]] <tt>(several models)</tt>

==Sound Problems==
*[[Problem with broken sound on ThinkPad 600 | Broken sound on ThinkPad 600/E]] <tt>(TP 600/E/X, 770Z)</tt>
*[[Problem with audio jacks | Audio jacks not working properly]] <tt>(TP T43)</tt>
*[[Problem with ALSA audio output | No audio heard with kernel 2.6.11+/ALSA]] <tt>(TP T43, T40)</tt>
*[[Problem with audio clipping|Audio clipping]] <tt>(TP T43)</tt>
*[[Problem with no sound on ThinkPad R60e | No Sound on ThinkPad R60e and T60]] <tt>(R60e, T60)</tt>

==Misc Problems==
*[[System randomly freezes and requires hard reset]] <tt>(X61s and all newer systems including X,T,R,Z series)</tt>
*[[Problem with Bending / Twisting|Casing malformed by bending/twising]] <tt>(X41)</tt>
*[[Problem with failing memory slot]] <tt>(T30, and some T2x models)</tt>
*[[Problem with Dock USB Ports | Dock USB Ports]] <tt>(T30/X21)</tt>
*[[High-pitch noise from AC-Adapter]] <tt>(T60/p)</tt>
*[[Problem with lm-sensors | lm_sensors kills ThinkPads]] <tt>(TP 570E, 770X/Z, 600E/X, 240, X20)</tt>
*[[Problem with USB 2.0 | USB 2.0 problems]] <tt>(T40/T41)</tt>
*[[Embedded Controller Firmware#Firmware_issues|Firmware issues]]
*[[Problem with hot surfaces|Problem with hot surfaces]] <tt>(T43)</tt>
*[[Problem with disabled VT]] <tt>(Z61t, X60, X60s)</tt>
*[[Unable to create recovery cds when another python is installed on the system]] <tt>(T43p)</tt>