Protecting data on the PC
The data on a PC is important to the PC user and to the company. The data is often company confidential. It might be that the data is governed by government security or privacy regulations.
Regulatory compliance usually includes dependencies on the use of encryption to protect the confidentiality of sensitive data. ThinkVantage security can be part of your overall plan for regulatory compliance.
Another problem is protecting the availability of the data. All of us have accidentally damaged or destroyed data. Many of us have been the victims of malicious software, like a virus, that destroys data.
One last point to think about. At the end of the life for a PC, what do you do to protect the confidentiality of data on a hard drive that is leaving the company? How do you be sure that your data won’t be made available to the next person who owns that drive?
Protecting data confidentiality
ThinkVantage technology offers several layers of protection for confidential data. The first is the Hard Drive Password. If it is set, you have to provide it when the system is turned on, otherwise the drive will not spin up. If the drive does not spin up, then the data can not be accessed.
Next on the list is encryption. The idea of data encryption sounds straight forward. If the data is encrypted, no one can use it.
ThinkVantage security offers two primary ways of protecting confidentiality of data on a PC using encryption. One is full hard drive encryption. Every data sector on the hard drive is encrypted. That means that page data sets, swap files, temporary files, cached files from the internet and everything else is encrypted on the drive.
The other approach is to encrypt files. File encryption means that the only data that is ever exposed to an attacker is data that happens to be decrypted and in use at the time the attacker gains access to the PC.
Both ways of protecting the confidentiality of your data rely on authentication to prove you have the right to access that data. Access can be granted if you know the password or if your fingerprint is a match.
Encryption products
We offer a suite of Utimaco Safeware software products that are compatible with ThinkVantage Technologies
Full Hard Drive encryption with the "Touch of a Finger"
Lenovo ThinkPad notebooks are the first in the world to offer this rock-solid, layered security solution. Utimaco’s SafeGuard® Easy works on industry standard PCs, however on Lenovo X, T, Z and R series 60 and higher ThinkPads along with the X41 Tablet, you get the added functionality of pre-boot authentication with the swipe of a finger. ThinkPad’s fingerprint reader can provide secure access to a fully encrypted hard drive without the use of a password. This offering also supports ThinkVantage Technologies such as Rescue & Recovery for a complete solution.
SafeGuard® Easy is full hard disk encryption software for both notebook and desktop computers. By encrypting the entire drive, SafeGuard Easy renders data completely undecipherable to unauthorized users. Best of all, users work uninterrupted while SafeGuard® Easy encrypts and decrypts hard drive data on demand, providing true data at rest protection. SafeGuard® Easy's sector-level hard drive encryption combined with secure pre-boot user authentication ensures that disk data remains encrypted and hack-proof — even if your laptop is lost or stolen!
SafeGuard® Easy's hard disk encryption is hands-down the most effective solution for securing data on your notebook's hard disk. SafeGuard® Easy can also encrypt external USB storage devices and removable media; it's a perfect solution to secure USB flash drives, external hard drives, even SD (Secure Digital) memory cards.
comes from Lenovo with 1 year of MSU (Maintenance, Support and Upgrades). Additional years of MSU may be purchased if SafeGuard® Easy is presently covered by a MSU agreement.
File encryption solution SafeGuard PrivateDisk Enterprise Edition is a data encryption security product that generates an encrypted folder on the system. Any critical, sensitive, or valuable data specified by the administrator or user can be securely encrypted and stored in the folder on the hard disk drive or other storage media. The drive can be local (on the PC) or a shared network drive. This virtual disk is like an electronic safe: any confidential data can be securely encrypted and stored safely on it. Enterprise Edition features central administration controls for network and client management.
comes from Lenovo with 1 year of MSU (Maintenance, Support and Upgrades). Additional years of MSU may be purchased if SafeGuard Private Disk is presently covered by a MSU agreement.
Data Regulatory Compliance
The need to protect data stored and accessed through PCs has never been greater, and new and existing government regulations make it even more important and risky. Regulations such as Sarbanes-Oxley and the Health Insurance Portability and Accountability Act (HIPAA) in the United States, and the European Union Data Protection Directive and Basel II, contain a variety of requirements that have direct implications to security and penalties for non-compliance to these and other regulations. By integrating select ThinkPad and ThinkCentre systems with ThinkVantage Technologies into your compliance programs, you can help reduce the risk of compromised data by enabling our client security solutions.
Protecting the availability of data on a PC
Data can be lost by accident, equipment failure and by malicious software. Measures can be taken to reduce the chance of loss, including user education and software that blocks malicious software. No matter what is done to prevent loss, sometimes it happens. That is why we make backups.
ThinkVantage technology follows two strategies for helping you to protect the availability of your data. One strategy is to help you block malicious software. This strategy includes Antidote emergency patch management. Antidote provides a service unique in the industry. It makes it possible for you to patch a system that has already been destroyed by malicious software.
The other approach is to provide a robust and flexible PC backup and recovery solution. This solution enables you to recover all or part of the data on your PC, even if the operating system won’t boot.
Recovering from data loss
Rescue and Recovery™ is a one button recovery and restore solution that includes a set of self recovery tools to help users diagnose, get help and recover from system crashes quickly, even if the primary operating system will not boot.
Protecting against malicious software
Antidote Delivery Manager allows IT to deliver fixes and updates to users where-ever they are, even if their system is down from a worm or virus.
Protect against harmful virus attacks Preloaded Norton AntiVirus (OEM Version) software by Symantec™ (select models) examines memory, boot records and system files and helps defend your ThinkPad or ThinkCentre system from software viruses without interrupting your work. The preload includes 90 days of virus definition updates.
Protecting the confidentiality of data on drives that are at end of life
You have had this disk drive for three years. During that time, you’ve written a lot of confidential information on the drive. Now it is time for that drive to go away. Where will it go? Who will receive it? Most important of all, what will they find on that drive when they receive it? The only correct answer to that question is — nothing.
Destroying drive data at PC end of life
ThinkVantage Secure Data Disposal meets the highest Department of Defense standards for elimination of data from a hard drive. Secure Data Disposal should be the last program run on a PC before that PC is sent out of the company. The purpose of the product is to permanently remove all traces of data previously stored on the hard drive.
Interoperability with other security offerings
The Client Security Solution has been tested to interoperate with select security offerings from these organizations:
![[+]](http://www.lenovo.com/i/v15/icons/cvm_plus.gif){kind=icon}
