Lenovo ThinkCentre M91p Quick reference guide

LenovoBIOSWindows
M a nag e m e n t Instrumentation
In t e rf a c e Deployment Guide for
Desktop
Date:Sep. 2011

Second Edition (Sep. 2011)
© Copyright Lenovo 2011. All rights reserved.

@Copyright Lenovo 2011
I
Contents
Preface....................................................................................................................................III
Chapter 1. Overview ............................................................................................................... 1
Using Windows Management Instrumentation.................................................................................................1
Key benefits .....................................................................................................................................................1
Function...................................................................................................................................................2
Environment............................................................................................................................................2
Interface...................................................................................................................................................2
Supported computers .......................................................................................................................................2
Chapter 2. Script Classes and Parameter............................................................................. 3
Configuring BIOS settings..............................................................................................................................3
Return types......................................................................................................................................................5
Password Authentication.................................................................................................................................5
Available BIOS setting names ........................................................................................................................6
Chapter 3. Typical Usage.......................................................................................................11
Listing current BIOS settings........................................................................................................................11
Changing BIOS settings ................................................................................................................................ 11
Changing the boot order................................................................................................................................ 11
Restoring default settings..............................................................................................................................12
Changing an existing hardware password ....................................................................................................12
Limitations......................................................................................................................................................13
Chapter 4. Security................................................................................................................ 15
AppendixA. Sample Visual Basic scripts for configuring BIOS settings......................... 17
Restore default settings...................................................................................................................................17
List all BIOS settings on the local computer ..................................................................................................18
Set a single BIOS setting on the local computer.............................................................................................18
Set a single BIOS setting on the local computer if a Administrator password exists......................................19
List all BIOS settings on a remote computer ..................................................................................................20
Set a single BIOS setting on a remote computer.............................................................................................20
Set a single BIOS setting on a remote computer when a Administrator password exists ...............................21
Set a Administrator password on the local computer when a Administrator password exists ........................22
Set a Administrator password on a remote computer when a Administrator password exists ........................23
Appendix B. Notices.............................................................................................................. 25
Trademarks.....................................................................................................................................................26

@Copyright Lenovo 2011
III
Preface
The purpose of this guide is to explain how to modify BIOS
settings, boot order using Windows Management Instrumentation
(WMI) through the Lenovo client-management interface. This
guide is intended for skilled IT administrators who are familiar
with configuring BIOS settings on computers in their
organizations.
This guide is provided in a ZIP file package that contains this
deployment guide as well as Visual Basic sample scripts to use
when configuring BIOS settings.
This deployment guide is developed for IT professionals to assist
with the unique challenges that they encounter. If you have
suggestions or comments, communicate with your Lenovo®
authorized representative. To learn more about the technologies that
can help you lower the total cost of ownership and to check for
periodic updates to this guide, visit the following Web site:
www.lenovo.com/support

@Copyright Lenovo 2011
1
Chapter 1. Overview
IT administrators are always looking for easier ways to manage
client computer BIOS settings, which include hardware settings,
and the boot order. The Lenovo BIOS WMI interface provides a
simplified way to change these settings. Lenovo has developed a
BIOS interface that can be manipulated through Windows
Management Instrumentation (WMI). The Lenovo BIOS WMI
interface enables IT administrators to make queries on current
BIOS settings, restore settings to their factory defaults, change
single settings, reset or change passwords, and modify the boot
order either at client computers or remotely.
Using Windows Management Instrumentation
WMI is provided as a standard feature in most Windows® operating
systems. It provides a powerful set of functions, such as
query-based information retrieval and event notification, which
enables users to manage both local and remote computers. The
Lenovo BIOS WMI interface extends the capabilities of WMI to
allow management of BIOS settings.
The following illustration shows how WMI can be used to access
Lenovo BIOS settings.
WMI uses Windows Script host (WSH) to interpret scripts. You can
write your scripts in either Windows Visual Basic Scripting Edition
(VBScript) or JavaScript.
Key benefits
The Lenovo BIOS WMI interface provides the following benefits:

Lenovo BIOS Windows Management Instrumentation Interface Deployment Guide for Desktop
2
Function
·Flexible BIOS configuration, including the ability to change a
single BIOS setting or all BIOS settings
·Bios password management , including update Administrator
passwords, power-on passwords(POP), hard disk
drive(HDD)passwords
·No dependency on a specific BIOS level
Environment
·Remote or local capabilities
·Support of unattended operations
·No software installation, including managed object format (MOF),
required
·Replaces DOS-based BIOS configuration tools
Interface
·Easy to adopt for various management servers
·Replaces current SMI interface
·Common interface for different products
Supported computers
BIOS setup through WMI descripted in this document is
supported on the following new Thinkcentre products only:
·Thinkcentre M91/M91p

@Copyright Lenovo 2011
3
Chapter 2. Script Classes and Parameter
This chapter contains WMI implementation details for configuring
BIOS settings.
Configuring BIOS settings
The following interface details can be used to access Lenovo BIOS
settings.
·Namespace: "\root\WMI"
·Base Class: "Lenovo_BIOSElement"
·Interface details (see Table 1)
Table 1. Interface Details

Lenovo BIOS Windows Management Instrumentation Interface Deployment Guide for Desktop
4
Class Name
Type
Parameter/Return
Example
Lenovo_BiosSetting
Query
CurrentSetting:”Item,Value”
“Wake Up on LAN,
Eanbled”
Lenovo_SetBiosSetting
Method
“Item,Value;”
“Wake Up on
LAN,Disabled;”
Lenovo_SaveBiosSettings
Method
“Password,Encoding,KbdLa
ng;”
“pswd,ascii,us;“
Lenovo_DiscardBiosSettings
Method
“;”
“;”
Lenovo_LoadDefaultSettings
Method
“;”
“;”
Lenovo_BiosPasswordSettings
Query
PasswordMode:”Value”
-0:Legacy Mode
-Others: Reserved
PasswordState:”Value”
-BIT0=1: User password is
installed
-BIT1=1:Admin password is
installed
-BIT2=1:Hard disk
passwords are installed
MinLength:”Value”
-1:always one byte
MaxLength:”Value”
-64:always 64 byte
SupportedKeyboard:”Value
”
-BIT0=1:Support US
keyboard
-BIT1=1:Support French
keyboard
-BIT2=1:Support German
keyboard
SupportedEncodings:”Value
”
-BIT0=1: support ASCII
password input
-BIT1=1:support scancode
password input
Port0HardDiskPasswordStat
e:”Value”
-BIT0=1:User hard disk
password is installed
-BIT1=1:Master hard disk
password is installed
Port1HardDiskPasswordStat
e:”Value”
Port2HardDiskPasswordStat
e:”Value”
Port3HardDiskPasswordStat
e:”Value”
Port4HardDiskPasswordStat
e:”Value”
Port5HardDiskPasswordStat
e:”Value”
PasswordMode:1
PasswordState:0
MinLength:1
MaxLength:64
SuportedKeyboard:7
SupportedEncodings:3
Port0HardDiskPasswordS
tate:00
Port1HardDiskPasswordS
tate:00
Port2HardDiskPasswordS
tate:00
Port3HardDiskPasswordS
tate:00
Port4HardDiskPasswordS
tate:00
Port5HardDiskPasswordS
tate:00
Lenovo_SetBiosPassword
Method
“PasswordType,CurrentPass
word,
NewPassword,Encoding,Kb
“pop,oldpop,
newpop,ascii,us;”

@Copyright Lenovo 2011
5
Notes:
1. See Appendix A, “Sample Visual Basic scripts for configuring
BIOS settings,”on page 15 for Visual Basic sample scripts.
2. See Table 4 on page 6 for a listing of acceptable setting names.
Return types
You will receive one of the following return types after making
changes to BIOS settings:
Table 2. Return Types
Return Type
Description
Success
Operation completed successfully.
Not
Supported
The feature is not supported on this system.
Invalid
Parameter
The item or value provided is not valid.
Access
Denied
The change could not be made due to an authentication
problem. If a supervisor password exists, the correct supervisor
password must be provided.
System Busy
BIOS changes have already been made that need to be
committed. Reboot the system and try again
Password Authentication
If an Administrator password is already set, you must specify that
administrator password before you can change any BIOS settings.
The format for password parameters is "abc,ascii,us" with
descriptions in Table 3.
Table 3. Password parameters format, password authentication
Parameter
Description
Possible selections
Parameter 1
Current password
·“abc” - raw ascii character
·“1e302e” –scancode
Parameter 2
Password encoding
·“ascii”
·“scancode”
Parameter 3
Keyboard languages
(valid only if encoding is ″ascii″)
·″us″- English US, English,
French-Canadian, Italian, Japanese,
Korean, Norwegian, Polish,
Portuguese,
Spanish-European, Spanish-Latin
American, Swiss, Turkish
·″fr″- French-European, Belgian
·″gr″- German, Czech, Slovak, Slovenian
dLang;”

Lenovo BIOS Windows Management Instrumentation Interface Deployment Guide for Desktop
6
Available BIOS setting names
Some BIOS settings are dependent on the presence of certain
hardware features. Settings might vary on different computers.
Notes:
1. BIOS settings and values are case sensitive.
2. The security-related options are not changed even if the
“load default” is requested.
Table 4. List of available BIOS settings
Item Name
Option Value
Related item
Serial Port1 Address
"Disabled","3F8/IRQ4","2F8/IRQ3","
3E8/IRQ4","2E8/IRQ3",
N
Serial Port2 Address
"Disabled","2F8/IRQ3","2E8/IRQ3",
N
Parallel Port Address
"378","278","3BC","Disabled"
N
Parallel Port Mode
"ECP+EPP","ECP","EPP"
Parallel Port
Address
EPP Version
"1.9","1.7"
Parallel Port
Address
ECP Mode DMA Channel
"DMA3","DMA1"
Parallel Port
Address
Parallel Port IRQ
"IRQ7","IRQ5"
Parallel Port
Address
USB 3.0 extended Card
“Enabled”,”Disabled”
N
USB Support
"Enabled","Disabled"
N
USB Legacy Support
"Enabled","Disabled"
USB Support
Front USB Ports
"Enabled","Disabled"
USB Support
Rear USB Ports
"Enabled","Disabled"
USB Support
USB Port 1
"Enabled","Disabled"
USB Support
&Front USB
Ports
USB Port 2
"Enabled","Disabled"
USB Support
&Front USB
Ports
USB Port 3
"Enabled","Disabled"
USB Support
&Rear USB
Ports
USB Port 4
"Enabled","Disabled"
USB Support
&Rear USB
Ports
USB Port 5
"Enabled","Disabled"
USB Support
&Rear USB
Ports
USB Port 6
"Enabled","Disabled"
USB Support
&Rear USB
Ports
USB Port 7
"Enabled","Disabled"
USB Support
&Rear USB
Ports
USB Port 8
"Enabled","Disabled"
USB Support

@Copyright Lenovo 2011
7
&Rear USB
Ports
USB Port 9
"Enabled","Disabled"
USB Support
&Front USB
Ports
USB Port 10
"Enabled","Disabled"
USB Support
&Front USB
Ports
External SATA Port
"Disabled", "Enabled"
N
SATA Controller
"Disabled", "Enabled"
N
Configure SATA as
"IDE","AHCI","RAID"
SATA
Controller
Hard Disk Pre-delay
"Disabled","3 Seconds","6
Seconds","9 Seconds",
"12 Seconds","15 Seconds","21
Seconds","30 Seconds"
N
Select Active Video
"IGD","PCI","PEG","Auto"
N
Pre-Allocated Memory Size
"32MB","64MB","128MB"
Select Active
Video
Total Graphics Memory
"128MB","256MB","Maximum"
Select Active
Video
Multi-Monitor Support
"Disabled","Enabled"
Select Active
Video
Onboard Audio Controller
"Disabled","Enabled"
N
Onboard Ethernet
Controller
"Disabled","Enabled"
N
Boot Agent
"PXE","SMC","Disable"
Onboard
Ethernet
Controller
Intel(R) SpeedStep(TM)
Technology
"Disabled","Enabled"
N
Core Multi-Processing
"Enabled","Disabled"
N
Hyper Threading
Technology
"Disabled","Enabled"
N
Execute Disable Bit
"Disabled","Enabled"
N
Intel (R)Virtualization
Technology
"Disabled","Enabled"
N
VT-d
"Disabled","Enabled"
Intel (R)
Virtualization
Technology
TxT
"Disabled","Enabled"
Intel (R)
Virtualization
Technology
or VT-d
C State Support
"C1","C1C3","C1C3C6"
N
Turbo Mode
"Disabled","Enabled"
N
Intel(R) Manageability
Control
"Disabled","Enabled"
Onboard
Ethernet
Controller
Intel(R) Manageability
Reset
"Disabled","Enabled"
Onboard
Ethernet
Controller

Lenovo BIOS Windows Management Instrumentation Interface Deployment Guide for Desktop
8
Press <CTRL-P> to enter
MEBx
"Disabled","Enabled"
Onboard
Ethernet
Controller
Console Type
VT100/VT100, 8bit/PC-ANSI, 7bit/PC
ANSI/VT100+/VT-UTF8/ASCII
N
CPU CRID Support
Disabled /Enabled
N
Chipset CRID Support
Disabled /Enabled
N
Enhanced Power Saving
Mode
Disabled /Enabled
N
Smart Performance Choice
Better Acoustic Performance /
Better Thermal Performance
N
After Power Loss
"Power Off","Power On","Last
State"
N
Wake on LAN
"Primary","Automatic","Disabled"
N
Wake from PCI Modem
"Primary","Automatic","Disabled"
N
Wake from Serial Port Ring
"Primary","Automatic","Disabled"
N
Wake from PCI Device
"Primary","Automatic","Disabled"
N
Wake Up on Alarm
"Single Event","Daily
Event","Weekly Event","Disabled"
N
Startup Sequence
"Primary","Automatic"
Wake Up on
Alarm
Alarm Day of Week
"Sunday","Monday","Tuesday","We
dnesday","Thursday",
"Friday","Saturday"
Wake Up on
Alarm
Hardware Password
Manager
"Disabled","Enabled"
N
Set Administrator
Password
Enter
N
Set Power-On Password
Enter
N
Require Admin. Pass.
when Flashing
"No","Yes"
N
Require POP On Restart
"No","Yes"
N
Preboot Authentication
"Disabled","Enabled"
N
Erase Fingerprint Data
"No","Yes"
N
Require HDP On Restart
"Yes","No"
N
TCG Security Feature
"Disable","Inactive","Active"
TXT
Clear TCG Security Feature
"No","Yes"
TXT
Chassis Intrusion
Detection
Enabled/Disabled
PAP
Configuration Change
Detection
"Disabled","Enabled"
N
Primary Boot Sequence
"Floppy Drive", "Hard Drive",
"CD/DVD Drive", "Network Card",
"USB Floppy", "USB Hard Disk",
"USB CD/DVD", "USB Key"
SATA
Controller&
Onboard
Ethernet
Controller&
USB Support
Automatic Boot Sequence
SATA
Controller&
Onboard
Ethernet

@Copyright Lenovo 2011
9
Controller&
USB Support
Error Boot Sequence
SATA
Controller&
Onboard
Ethernet
Controller&
USB Support
Manufacturing Boot
Sequence
SATA
Controller&
Onboard
Ethernet
Controller&
USB Support
Boot Mode
“Auto”,”UEFI”,”Legacy”
N
Quick Boot
“Enabled”,”Disabled”
N
Boot Up Num-Lock Status
“On”,”Off”
N
Keyboardless Operation
"Disabled","Enabled"
N
Option Keys Display
"Disabled","Enabled"
N
Option Keys Display Style
“Normal”,”Legacy”
N
Startup Device Menu
Prompt
“Enabled”,”Disabled”
N
Serial Number Style
"Legacy
Style","MTM&SN-1","MTM&SN-2","1
S-MTM-SN"
N
Note：
for “Serial Number Style”:
Legacy Style means display the legacy seven digit serial number
MTM&SN-1 means concatenation of Machine Type with Serial Number
(mmmmsssssss)
MTM&SN-2 means concatenation of Machine Type/Model and Serial Number
(mmmmmmmsssssss)
1S-MTM-SN means concatenation of "1S", Machine Type/Model and Serial Number
(1Smmmmmmmsssssss)

@Copyright Lenovo 2011
11
Chapter 3. Typical Usage
Through WMI, you can configure BIOS settings in the
following ways:
·List BIOS settings
·Change BIOS settings
·Change the boot order (sometimes referred to as the startup
sequence)
·Load default BIOS settings
Listing current BIOS settings
For a list of all available BIOS settings that can be changed
through WMI on a specific computer, use the
Lenovo_BiosSetting class (see “List all BIOS settings on the
local computer” on page 16 and “List all BIOS settings on a
remote computer” on page 18 for sample scripts).
See Table 3 on page 4 for a list of available BIOS settings.
Changing BIOS settings
To change a BIOS setting, complete the following steps:
1. Identify the BIOS setting you want to change using the
Lenovo_BiosSetting class (see “List all BIOS settings on the local
computer” on page 16 and “List all BIOS settings on a remote
computer” on page 18 for sample scripts).
2. Identify the value to which the setting will be changed.
Note: See Table 4 on page 4 for a list of available values for a
particular setting.
3. Change the BIOS setting to the desired value using the
Lenovo_SetBiosSetting class, then use the Lenovo_SaveBiosSetting
class to save the settings (see “Set a single BIOS setting on the local
computer” on page 16 and “Set a single BIOS setting on a remote
computer” on page 17 for sample scripts).
Note: BIOS settings and values are case sensitive.
After making changes to the BIOS settings, you must reboot the
computer before the changes will take effect.
Changing the boot order
To change the boot order, complete the following steps:
1. Determine the current setting for “BootOrder” by using the

Lenovo BIOS Windows Management Instrumentation Interface Deployment Guide for Desktop
12
Lenovo_BiosSetting class (see “List all BIOS settings on the local
computer” on page 16 and “List all BIOS settings on the remote
computer” on page 18for sample scripts).
2. To set a new boot order, use the Lenovo_SetBiosSetting class,
then use the Lenovo_SaveBiosSetting class to save the settings
(see “Set a single BIOS setting on the local computer” on page 16
and “Set a single BIOS setting on a remote computer” on page 17
for sample scripts). Specify a new boot order by listing the boot
devices in order, separated by colons. Devices that are not
specified are excluded from the boot order. In the following
example, the CD/DVD drive is the first boot device and hard
disk drive is the second boot device and so on.
Example: Change primary boot sequence,
Primary Boot Sequence,CD/DVD Drive:Hard Drive:Network
Card:USB Key:USB Floppy:USB Hard Disk
Restoring default settings
To restore default BIOS settings, use the Lenovo_LoadDefaultSettings class,
and then use the Lenovo_SaveBiosSettings class to save the BIOS changes
(see sample scripts).
Changing an existing hardware password
To update a password, specify a password type and format the
password. The format for password parameters is ″pap,abc,def,ascii,us″
with descriptions in Table 5 (see “Set a Administrator password on the
local computer when a Administrator password exists” on page 20 and
“Set a Administrator password on a remote computer when a
Administrator password exists” on page 21 for sample scripts).
Table5.Passwordparametersformat,changingexistinghardwarepassword
Parameter
Description
Possible seletctions
Parameter 1
Password type
string
“pap”:Administrator password
“pop”:Power-on password
“uhdp0”: User password of HDD0
“mhdp0”:Master pasword of HDD0
“uhdp1”:User password of HDD1
“mhdp1”:Master password of HDD1
“uhdp2”:User password of HDD2
“mhdp2”:Mater password of HDD2
“uhdp3”:User password of HDD3
“mhdp3”:Master password of HDD3
“uhdp4”:User password of HDD4
“mhdp4”:Master password of HDD4
“uhdp5”:User password of HDD5
“mhdp5”:Master password of HDD5
Parameter 2
Current
password
string
“abc”:raw ascii character
“1e302e”:scancode
Parameter 3
New password
string
“def”:raw ascii character
“201221”:scancode
Parameter 4
Password
encoding
“ascii”
“Scancode”
Parameter 5
Keyboard
·“us″- English US, English UK,