Lenovo ThinkVantage Client Security Solution 8.3 - Manual (Page 80)

• Atmel-ThinkPad T60/R60/X60/X300, ThinkCentre M57
• Intel-ThinkPad T500/R500/X200/X301
• ST Micro-ThinkPad T410/T510/X201/T420/T520/X220, ThinkCentre M90
• Winbond-ThinkCentre M58
These TPMs have different characteristics when they enter lockout mode, as described below:
Atmel TPM:
• No lockout during the first 15 bad password attempts
• The 16th bad password attempt results in a lockout period of 1.1 minutes
• Then, no lockout during the next 15 bad password attempts
• The next lockout period is 2.2 minutes
• Each lockout period doubles, after each batch of 15 bad password attempts, up to a maximum lockout
period of 4.7 hours
• Lockout is reset if the computer is turned off
Intel TPM:
• No lockout during the first 100 bad password attempts
• The 101st bad password attempt results in a lockout period of 16 seconds
• Each subsequent bad password attempt results in a lockout period twice as long as the previous lockout
period, without a maximum lockout period
• The bad password counter decreases by one each hour, until it decreases to zero
ST Micro TPM:
• No lockout during the first 40 bad password attempts
• The 41st bad password attempt results in a lockout period of three seconds
• Each subsequent bad password attempt results in a lockout period twice as long as the previous lockout
period, with a maximum lockout period of two hours
Winbond TPM:
• The first bad password attempt results in a lockout period of 0.25 millisecond
• Each subsequent bad password attempt results in a lockout period twice as long as the previous lockout
period, with a maximum lockout period of 14 hours
Note: It takes 13 bad attempts to reach a lockout period of one second.
• After 24 hours, the bad password counter is reset to zero
74 Client Security Solution 8.3Deployment Guide