Home > Intel Communities > Open Port IT Community > Intel Premier IT Professional Zone > Blog > 2008 > December > 19
Currently Being Moderated
7

IT Striking Back at Laptop Thieves

Posted by Chris Hubbard on Dec 19, 2008 4:54:14 PM

Earlier this month I was able to test out Absolute Software's Computrace service that utilizes Intel® Anti-Theft Technology.  You may have heard of Absolute Software's consumer service called LoJack for Laptops which enables you to track down a stolen laptop.  Computrace is the corporate version of that service that includes additional features for IT shops .  This month, Absolute announced a new version of Computrace that, as mentioned, uses the Anti-Theft technolgy found in new Intel® Centrino® 2 with vPro technology PCs from Lenovo.

 

According to Absolute, 88% of stolen laptops are never recovered.  For IT shops, this poses a couple of problems: loss of the asset and loss of the data.  With the Computrace service, you have a chance to address both of those.

 

When using Computrace, once a day your laptop will use the available internet connection to phone home to the Computrace servers on the internet.  Under normal circumstances, the laptop will receive an "all clear" signal from the servers and disconnect until the following day.  All this happens silently in the background without user intervention.

 

If the laptop is stolen or misplaced, the IT department can log into the Computrace website and mark that laptop as stolen.  The next time that laptop phones home, it is now informed that it is stolen and will execute a policy based sequence of actions.  One possible action is that it begins immediately wiping sensitive data from the hard drive.  It can also begin sending out packets that will allow Absolute Software to trace the location of the laptop and notify the authorities in the jurisdiction.

 

There are several layers of security available.  If a thief reformats the hard drive and installs a fresh copy of Windows, the Computrace software will automatically reinstall itself from the Computrace code embedded in the BIOS of the laptop.

 

You can also activate a "poison pill" that will prevent the laptop from booting at all.  This can be activated either when it phones home and receives a "stolen" signal, or you can set a threshold and if the laptop hasn't phoned home within a set number of days it will automatically lock up and prevent booting.  Once locked, the laptop is effectively useless.  You can't enter the BIOS and you can't boot to any device.  If the device is recovered, IT can produce an unlock code that will return the laptop to full functionality.

 

When paired with disk encryption, this is a powerful countermeasure to laptop theft.  If the data is protected by encryption and the notebook is unuseable because of the Intel Anti-theft technology, the laptop effectively has no value to anyone.  With the LoJack capability, a stolen laptop actually becomes a liability since it could be telling the local authorities where the stolen laptop is.

 

During my hands-on test, I repeated locked and unlocked the Lenovo T400 laptop using a variety of methods like reporting it stolen and having it phone home or entering too many incorrect passwords.  When it was locked, I received some simple text telling me that the laptop was locked and to contact my IT department.  Swapping hard drives wouldn't unlock it.  It was impossible to enter BIOS.  This brand new T400 laptop was completly unuseable.  And once I entered the IT unlock passcode, it sprang back to life as if nothing had happened.  I was hooked.  As this becomes widely adopted, I have to imagine that thieves will lose interest in stealing most corporate laptops.

 

You can start using this cool new technology today.  Lenovo is rolling out firmware upgrades for its T400, T500, X200, and X301 notebooks based on Intel Centrino 2 with vPro technology.  Absolute Software has the new Computrace service ready to go and it's a quick and painless installation.  As skeptical as I am, I was pleased with the results.



Add a comment Leave a comment on this blog post.
Apr 12, 2009 10:03 AM Guest Thomas Hudson  says:

Anyone knows if it will work on Lenovo T61? I have that one at my workplace.

Thanks in advance.

Thomas.

Apr 15, 2009 2:39 PM Guest Свадебный фотограф  says:

Wow, its just amazing! It makes almost no sense to steal a laptop in this way!

May 12, 2009 10:33 PM Guest michael wilson  says in response to Thomas Hudson:

Yes it works perfectly with all lenovo laptops

May 18, 2009 8:22 AM Guest Mike B  says:

...if a thief formats and installs Linux he will be fine, because computrace is not compatable.

May 18, 2009 10:51 AM Chris Hubbard Chris Hubbard    says in response to Mike B:

While you're correct that Computrace won't install itself into Linux, that doesn't mean the thief is in the clear.  If the laptop receives the poison pill before Linux gets installed, it's all over - the thief will never get a chance to install it.  If the thief does get Linux installed before a rendezvous call is made and the poison pill is received, there is still the timer that will lock up the laptop after an IT defined period without successful rendezvous calls.  If the timer was, say, 3 days, after 3 days without checking in the laptop will lock up, regardless of which OS is installed.

 

That is one of the nice features of the Computrace and Anti-Theft solution, it has several different layers of security so that if one is compromised the other layers can still protect you.

Jun 15, 2009 8:51 AM Guest Danu  says:

This is cool... I love Computrace software's reinstall feature... it's like putting some magic curse in your laptop... awesome...