Revision : 01 -------------------------------------------------------------------------------- Software name BIOS Update Utility Support model ThinkPad T460 Operating Systems Microsoft Windows 10 64-bit Microsoft Windows 8.1 64-bit Microsoft Windows 7 32-bit, 64-bit Refer to marketing materials to find out what computer models support which Operating Systems. Version 1.43.1.11 -------------------------------------------------------------------------------- WHAT THIS PACKAGE DOES This package updates the BIOS (including system program and Embedded Controller program) stored in the ThinkPad computer to fix problems, add new functions, or expand functions as noted below. This package also contains the tool to create a bootable BIOS Flash USB memory key. Please refer to "Instruction US - BIOS flash USB memory key.txt" in the installation folder for detail instruction. This program is language independent and can be used with any language system. -------------------------------------------------------------------------------- CHANGES IN THIS RELEASE Version 1.43 [Important updates] - Security update [Security ID 004-025]&&(LEN-28178). - Security update (LEN-28235 MCU). - Security update [Security ID 004-025]&&(LEN-28178). - updated Skylake MCU to MC0406E3_000000D5_000000D6. [New functions or enhancements] Nothing. [Problem fixes] Nothing. -------------------------------------------------------------------------------- DETERMINING WHICH VERSION IS INSTALLED There are two ways to check the UEFI BIOS version and BIOS ID. [Checking on Windows] Windows 8.1: 1. Hold down the Windows logo key and press X to open a menu at the lower-left area of the screen. 2. Select Control Panel from the menu. 3. Make sure "View by Category" is selected, and select System and Security, select Administrative Tools, and then select System Information. - or - 2. Select Run from the menu. 3. Type msinfo32, and press Enter. 4. On the System Information window, make sure System Summary is selected in the left side of the window. 5. Locate the BIOS version/date line in the right side of the window. "LENOVO BIOS ID (BIOS version), date" will be shown. If you are prompted for an administrator password or confirmation, type your password, or click Continue. Windows 7: 1. Click Start, click All Programs or Programs, click Accessories, click System Tools and then click System Information. - or - Click Start, type msinfo32 in the Start Search box and then click msinfo32 in the Programs list. 2. On the System Information window, make sure System Summary is selected in the left side of the window. 3. Locate the BIOS version/date line in the right side of the window. "LENOVO BIOS ID (BIOS version), date" will be shown. If you are prompted for an administrator password or confirmation, type your password, or click Continue. [Checking on ThinkPad Setup] Windows 8.1: 1. Turn on the computer. 2. Open Charm Bar in the right pane of the screen. Click "Settings". 3. Click "Power". 4. Click "Restart" to restart the system. 5. While the "To interrupt normal startup, press Enter" message is displayed at the lower-left area or lower-center of the screen, press the F1 key. The ThinkPad Setup menu will be displayed. If a password prompt appears, type the correct password. 6. Locate the UEFI BIOS Version line and Embedded Controller Version line. "UEFI BIOS version (BIOS ID)" will be shown on the UEFI BIOS Version line. 7. Turn off the computer. Windows 7: 1. Turn off the computer. 2. Turn on the computer. 3. While the "To interrupt normal startup, press Enter" message is displayed at the lower-left area of the screen, press the F1 key. The ThinkPad Setup menu will be displayed. If a password prompt appears, type the correct password. 4. Locate the UEFI BIOS Version line and Embedded Controller Version line. "UEFI BIOS version (BIOS ID)" will be shown on the UEFI BIOS Version line. 5. Turn off the computer. -------------------------------------------------------------------------------- NOTES - Lenovo recommends to use initial factory default of "OS Optimized Defaults" in Restart menu in ThinkPad Setup because this setting should not be changed for usual case. When "OS Optimized Defaults" setting is changed to "Enabled", defaults value of restored by Load Default configuration function by F9 key about following settings. Depending on OS installation condition, the system may not boot by the settings change. Please understand well about effect of these settings before settings have to be changed. Affected Setup menu items "OS Optimized Defaults" setting [Disabled] case [Enabled] case - Security - UEFI BIOS Update Option - Secure RollBack Prevention [Disabled] [Enabled] - Secure Boot - Secure Boot [Disabled] [Enabled] - Startup - UEFI/Legacy Boot [Both] [UEFI Only] - UEFI/Legacy Boot Priority [Legacy First] (Not displayed) - CSM Support [Yes] [No] By the OS to be installed, you need to change "OS Optimized Defaults" as follows and execute loading default configuration. 1. Enter ThinkPad Setup menu by following steps in [Checking On ThinkPad Setup] in "DETERMINING WHICH VERSION IS INSTALLED" section. 2. Choose "Restart" to show the menu. 3. Select "OS Optimized Defaults" and press Enter. 4. Select as below and press Enter [Enabled] : Windows 8.1 64-bit [Disabled] : Windows 8.1 32-bit,Windows 7 and Windows XP 5. Press the F9 key to load default configuration. 6. Select Yes. 7. Press the F10 key to save default configuration and exit. 8. Select Yes. 9. Restart the computer. (Caution) If "Secure Boot" is enabled in "Secure Boot" menu in ThinkPad Setup but "UEFI Secure Boot" in top menu of ThinkPad Setup indicates "No", the Factory Keys have to be restored. Please restore Factory Keys by following steps. 1. Enter ThinkPad Setup menu by following steps in [Checking On ThinkPad Setup] in "DETERMINING WHICH VERSION IS INSTALLED" section. 2. Choose "Security" then "Secure Boot" to show the menu. 3. Select "Restore Factory Keys" and press Enter. 4. Select "Yes" to restore Factory keys. 5. Press F10 key and select "Yes" to save and exit from Setup menu. 6. Then the computer is restarted. - Lenovo recommends to install the USB 3.0 driver for Windows (Version 1.4.0.225 or higher) prior to updating the BIOS. Because the BIOS requires the modification in the USB 3.0 driver to fix USB 3.0 related issues. - To enable 30 Day standby feature of ThinkVantage Power Manager, system have to disable waking computer by network adapters and USB devices. Please uncheck "Allow this device to wake the computer" checkbox in Power Management tab for each devices in Device Manager. -------------------------------------------------------------------------------- UPDATING THE UEFI BIOS Notes: - If your computer runs satisfactorily now, it may not be necessary to update the UEFI BIOS. To determine if you should update the UEFI BIOS, refer to the Version Information section. - You need an AC adapter and a charged battery pack. - Remove the Power-on password prior to updating the UEFI BIOS in the remote deployment environments. Attention: Do not turn off or suspend the computer until the update has been completed. IF YOU DO THAT WHILE THE UPDATE IS STILL IN PROGRESS, THE SYSTEM BOARD MAY HAVE TO BE REPLACED. Manual Update This section assumes to use Internet Explorer and Windows Explorer. Downloading file 1. Click once on the underlined file name. Once this is done, some pop-up windows will appear. 2. Follow the instructions on the screen. 3. In the window to choose Run or Save, click Save. 4. Choose the folder you would like to download the file to and click Save. A different window will appear and the download will begin and complete. Once the download has completed, there may or may not be a message stating that the download completed successfully. Extracting file 5. Make sure to be logged on with an administrator account on the target computer. 6. Make sure the AC adapter is firmly connected to the target computer. 7. Locate the folder where the file was downloaded. 8. Locate the file that was downloaded and double-click it. 9. Follow the instructions on the screen. 10. In the Select Destination Location window, click Next. If you would like to select a different folder, click Browse. 11. In the Ready to Install window, click Install. All the necessary files will be extracted to the folder selected in the step 10. Updating the BIOS 12. Make sure the checkbox next to "Install ..... now" is checked and click Finish. 13. Follow the instructions on the screen. 14. Select 'Update ThinkPad BIOS' and follow the instructions on the screen. 15. After the update has been completed, the program shows a message 'Flash Update has been successfully completed...'. Follow the instructions on the screen to restart the computer. Finally delete the file saved in the step 4. Unattended Update This is for system administrators' use only. 1. Refer to the Manual Update section, and download and extract the file. 2. In the step 12 of the Installing files section, uncheck the checkbox next to "Install ..... now", and then click Finish to cancel installation. 3. At the command line, execute WINUPTP.EXE with the -s option. Example: [Path where the files were extracted]\WINUPTP -s To view the update result, refer to the WINUPTP.log file created at the same directory of the package. -------------------------------------------------------------------------------- INITIALIZING UEFI BIOS UEFI BIOS Initialization is suggested for some problems. To initialize the UEFI BIOS settings: Windows 8.1: 1. Turn on the computer. 2. Open Charm Bar in the right pane of the screen. Click "Settings". 3. Click "Power". 4. Click "Restart" to restart the system. 5. While the "To interrupt normal startup, press Enter" message is displayed at the lower-left area of the screen, press the F1 key. The ThinkPad Setup menu will be displayed. If a password prompt appears, type the correct password. 6. Press the F9 key to load default configuration. 7. Select Yes. 8. Press the F10 key to save default configuration and exit. 9. Select Yes. 10. Restart the computer. Windows 7: 1. Power off the computer. 2. Power on the computer. 3. While the "To interrupt normal startup, press Enter" message is displayed at the lower-left area of the screen, press the F1 key. The ThinkPad Setup menu will be displayed. If a password prompt appears, type the correct password. 4. Press the F9 key to load default configuration. 5. Select Yes. 6. Press the F10 key to save default configuration and exit. 7. Select Yes. 8. Restart the computer. Note: After initialization you may need to reapply some settings that you had changed previously. -------------------------------------------------------------------------------- VERSION INFORMATION The following versions of UEFI BIOS and ECP (Embedded Controller Program) have been released. (BIOS ID: R06ETnnW) ------------------- Package BIOS (BIOS ID) ECP (ECP ID) Rev. Issue Date --------- ---------------- ---------------- ---- --------------- 1.43 1.43 (R06ET69W) 1.11 (R06HT31W) 01 2020/03/19 1.42 1.42 (R06ET68W) 1.11 (R06HT31W) 01 2019/11/14 1.41 1.41 (R06ET67W) 1.11 (R06HT31W) 01 2019/06/19 1.40 1.40 (R06ET66W) 1.11 (R06HT31W) 01 2019/02/13 1.39 1.39 (R06ET65W) 1.11 (R06HT31W) 01 2019/01/18 1.38 1.38 (R06ET64W) 1.11 (R06HT31W) 01 2018/10/26 1.37 1.37 (R06ET63W) 1.11 (R06HT31W) 01 2018/08/21 1.36 1.36 (R06ET62W) 1.11 (R06HT31W) 01 2018/06/15 1.35 1.35 (R06ET61W) 1.11 (R06HT31W) 01 2018/05/24 1.34 1.34 (R06ET60W) 1.11 (R06HT31W) 01 2018/04/18 1.33 1.33 (R06ET59W) 1.11 (R06HT31W) 01 2018/03/21 1.32 1.32 (R06ET58W) 1.11 (R06HT31W) 01 2018/01/02 1.31 1.31 (R06ET57W) 1.11 (R06HT31W) 01 2017/12/01 1.30 1.30 (R06ET56W) 1.09 (R06HT29W) 01 2017/11/03 1.29 1.29 (R06ET55W) 1.09 (R06HT29W) 01 2017/10/11 1.28 1.28 (R06ET54W) 1.09 (R06HT29W) 01 2017/09/11 1.27 1.27 (R06ET53W) 1.09 (R06HT29W) 01 2017/08/03 1.26 1.26 (R06ET52W) 1.09 (R06HT29W) 01 2017/06/08 1.24 1.24 (R06ET50W) 1.09 (R06HT29W) 01 2017/06/05 1.23 1.23 (R06ET49W) 1.09 (R06HT29W) 01 2017/04/05 1.22 1.22 (R06ET48W) 1.09 (R06HT29W) 01 2017/03/02 1.21 1.21 (R06ET47W) 1.09 (R06HT29W) 01 2016/12/22 1.16 1.16 (R06ET42W) 1.09 (R06HT29W) 01 2016/09/26 1.15 1.15 (R06ET41W) 1.09 (R06HT29W) 01 2016/09/09 1.14 1.14 (R06ET40W) 1.09 (R06HT29W) 01 2016/08/26 1.13 1.13 (R06ET39W) 1.08 (R06HT28W) 01 2016/07/19 1.12 1.12 (R06ET38W) 1.08 (R06HT28W) 01 2016/06/16 1.10 1.10 (R06ET36W) 1.08 (R06HT28W) 01 2016/04/07 1.09 1.09 (R06ET35W) 1.07 (R06HT27W) 01 2016/03/22 1.07 1.07 (R06ET33W) 1.02 (R06HT22W) 01 2016/01/15 *1.20 cut in MFG only. Note: Revision number (Rev.) is for administrative purpose of this README document and is not related to software version. There is no need to upgrade this software when the revision number changes. To check the version of UEFI BIOS and Embedded Controller Program, refer to the Determining which version is installed section. Summary of Changes Where: < > Package version UEFI: UEFI BIOS version ECP: Embedded Controller Program version [Important] Important update (New) New function or enhancement (Fix) Correction to existing function (BIOS ID: R06ETnnW) ------------------- <1.43.1.11> - [Important] Security update [Security ID 004-025]&&(LEN-28178). - [Important] Security update (LEN-28235 MCU). - [Important] Security update [Security ID 004-025]&&(LEN-28178). - [Important] updated Skylake MCU to MC0406E3_000000D5_000000D6. <1.42.1.11> - [Important] Phoenix Security Fix ID 006-008 - TPM PCR vulnerability issue. - [Important] Changed SmmOEMInt15 to return an error after ExitBootServices. - [Important] Remove IpSecDxe. <1.41/1.11> - [Important] Update include a security fix. - [Important] Enhancement to address security vulnerability CVE-2018-12126, (https://cve.mitre.org/cgibin/ cvename.cgi?name=CVE-2018-12126) anticipated to be published 05/14/2019. - [Important] Enhancement to address security vulnerability CVE-2018-12127, (https://cve.mitre.org/cgibin/ cvename.cgi?name=CVE-2018-12127) anticipated to be published 05/14/2019. - [Important] Enhancement to address security vulnerability CVE-2018-12130, (https://cve.mitre.org/cgibin/ cvename.cgi?name=CVE-2018-12130) anticipated to be published 05/14/2019. - [Important] Update Intel MCU. <1.40/1.11> - [Important] Update include a security fix. <1.39/1.11> - [Important] Security fix addresses LEN-20494 TPM 2.0 Sleep-Wake Error in BIOS Firmware (CVE-2018-6622). Refer to Lenovo's Security Advisory page for additional information. (https://support.lenovo.com/us/en/solutions/LEN-20494) <1.38> - [Important] Update includes security fixes. - [Important] Added Hyper Threading enable/disable option to ThinkPad Setup for virtualized system users in order to address LEN-24163 L1 Terminal Fault Side Channel Vulnerabilities (CVE-2018-3646) Refer to Lenovo's Security Advisory page for additional information.(https://support.lenovo.com/us/en/solutions/LEN-24163) <1.37> - (New) Updated the Diagnostics module to version 04.00.001. - (New) Add boot path for Debian Linux - (Fix) Fixed an issue where BIOS silent update might fail with system account. - (Fix) Fix an issue where user cannot enter Bitlocker Pin code by using Bloomberg 4 keyboard. - (Fix) Fixed to preserve TPM state if user canceled the TPM firmware update. - (Fix) Fixed TPM firmware update issue with TPM 1.2. - (Fix) Fixed a mismatch issue between the Intel(R) ME configuration and FPF fuse settings. - (Fix) Fixed an issue where BIOS POST might display the error message "Boot Manager recover from an error." <1.36> - [Important] Security fix addresses LEN-22133 Speculative Execution Side Channel Variants 4 and 3a (CVE-2018-3639, CVE-2018-3640). <1.35> - (New) Support showing Progress Bar during WUFU or LVFS capsule update. - (Fix) Fixed POST Black Hang caused by Sierra 7455/7430. - (Fix) Fixed some settings wrongly changed when enable Device Guard by WMI. <1.34> - [Important] Security fix addresses LEN-19568 Intel Active Management Technology MEBx Access Control Bypass. - (New) Updated the Diagnostics module to version 03.12.003. <1.33> - [Important] Update includes a security fix. <1.32> - [Important] Enhancement to address CVE-2017-5715. - (Fix) Fixed an issue where Operating System cannot recognize custom ACPI Table. <1.31> - （New）Updated TXT BIOS ACM - (Fix) Fixed an issue that Network boot happened at reboot after WOL from S3. - (Fix) Fixed an issue that AMT remote force PXE boot fail. <1.30> - (New) Update in rom diag v 03.11.001. - (New) Update RTK UNDI driver. - (New) Update MCU. - (New) Update MEBx. - (Fix) Fix SMBios Type16/17 information incorrect. <1.29> - (New) Support interface of TPM firmware update. <1.28> - [Important] Update includes a security fix. (Note) If the UEFI BIOS has been updated to 1.28 or higher, it is no longer able to roll back to the version before 1.28 for security improvement. - (Fix) Fixed BitLocker recovery issue when PCR5 was enabled as platform validation profile - (Fix) Fixed tamper detection doesn't work when remove RTC battery. <1.27> - (New) Update includes a security fix. - (New) Updated the readme file. - (Fix) Fixed an issue where POST 191 error might occur when only SVP change is requested by WMI. <1.26> - (New) Update InRom Diagnostic. - (Fix) Fixed issue of client system lose boot devices after Microsoft SCCM installation by server. <1.24> - (New) Update includes some security fixes. - (New) Update InRom Diagnostic. - (New) Update CPU Microcode. - (New) Update Intel RC. - (New) Display PCI LAN device with component name in Boot Menu. - (New) Added latest Microsoft revocation file list in the default dbx for Secure Boot. Changed HDD password retry count for RSE from 5 to 3 to align Lenovo password policy. - (Fix) Fixed an issue where the computer might not boot when attaching to USB3.0 Hub on ThinkVision T2224z Monitor. - (Fix)Fixed an issue where system don't boot from network at Wake on Lan form S5. <1.23> - (Fix) Fixed WinFlash failure when Device Guard is enabled. <1.22> - (New) Update includes a security fix. (Note) If the UEFI BIOS has been updated to 1.22 or higher, it is no longer able to roll back to the version before 1.22 for security improvement. <1.21> - (Fix) Fixed an issue where system might hang up at POST with Error code 1802 for EM7455 WWAN device. - (Fix) Fixed an issue where the computer might not boot when attaching to USB 3.0 Hub on ThinkVision T2224z Monitor. - (Fix) Fixed an issue where ISO image cannot boot via AMT. <1.16> - (New) Update InRom diagnositcs module to v02.09.09 - (New) Update for some security issues. - (Fix) Fix TPM setting was changed to disabled from inactive with dTPM1.2 in setup. <1.15> - (Fix) Fixed BIOS SVP password prompt icon can't display in some situation. <1.14> - (New) Updated ME Region to ME Firmware 11.0.12.1008 & MEbx to 11.0.0.0008. - (New) Update Skylake D0/K0 MCU to 0000009Eh (MC0406E3_0000009D_0000009E) - (New) Added new incompatibility bit for Back Flash Prevention. - (Fix) Fixed security issues. - (Fix) Fixed CMOS POST error when AC/Battery/CMOS battery detached. - (Fix) Fixed S3 resume hang with NVMe HDP. - (Fix) Fixed some fan over shoot noise issue. <1.13> - (New) Remove unnecessary NFC support code. - (Fix) Fixed an issue related to yellow mark in device manager. <1.12> - (New) Updated the CPU microcode. - (New) Updated vbios/gop. - (New) Added Intel RSE support. - (New) Added New POST logo support. - (New) Added Workaround for Trackpoint does not work on pre-boot entironment. - (Fix) Fixed an issue related to incorrect battery charge/discharge sequence. - (Fix) Fixed an issue related to SVP storing failure after the WMI packet processing - (Fix) Fixed an issue related to Trackpoint does not work on pre-boot entironment. <1.10> - (New) Updated Skylake D0/K1 MCU to 00000084h - (New) Updated Intel RC1.9.0 - (New) Updated in-rom diagnostic version 02.09.06. - (New) Added NVMe legacy support. - (Fix) Fixed an issue related to System hang at Lenovo logo post screen when USB keyboard attached in USB 2.0 port of the dock. - (Fix) Fixed an issue related to system hang when pressing the escape key in the windows 7 boot manager screen. <1.09> - (New) Updated Skylake D0/K1 MCU to 00000076h (MC0406E3_00000075_00000076) - (New) Improved System Performance to stop Boot Performance log at runtime. - (New) Removed safe tamper. - (New) Enabled Device Guard feature. - (New) Supported the Remote Secure Erase. <1.07> - (New) Initial release. -------------------------------------------------------------------------------- TRADEMARKS * Lenovo and ThinkPad are registered trademarks of Lenovo. * Microsoft and Windows are registered trademarks of Microsoft Corporation. Other company, product, and service names may be registered trademarks, trademarks or service marks of others.