(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
| Lenovo ThinkPad X1 Carbon Gen 12 （21KC）
|
|
Security Grade
Calculator v
|
Lenovo ThinkPad X1 Carbon Gen 12
Release Date: 2024-05-09 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
🔗 Proof
|
Business ultrabook with dTPM 2.0 (FIPS 140-2), Kensington Nano lock slot, BIOS password hierarchy, ThinkShutter camera cover
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Enterprise-grade hardware; no widely-reported critical flaws
|
| Prior attacks
|
None
|
🔗 Proof
|
Business laptop; no major public compromise of this model
|
| Updatability
|
Very common
|
🔗 Proof
|
Lenovo publishes BIOS/firmware/driver updates via Vantage; Windows 11 monthly patches
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
Intel vPro on select models; enterprise SSO, BitLocker, Active Directory, MDM support
|
| Communications
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
Wi-Fi 6E/7 (WPA3), Thunderbolt 4, TLS 1.3; vPro remote management
|
| Storage
|
Encrypted with up-to-date encryption
|
🔗 Proof
|
dTPM 2.0 supports self-encrypting drive (Opal 2.0) and BitLocker
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Enterprise directory/AD join, MDM, vPro, BitLocker, Windows Hello for Business
|
| Authentication
|
Secure
|
🔗 Proof
|
Match-on-chip fingerprint reader + IR camera (Windows Hello facial recognition) + BIOS/power-on/supervisor passwords
|
| Brute-force protection
|
Exist
|
🔗 Proof
|
Windows lockout policies; BIOS/NVMe password; dTPM-backed BitLocker pre-boot
|
| Event logging
|
Access event logged
|
🔗 Proof
|
Windows Event Log; ThinkShield/Intel vPro remote audit logs
|
| Passwords
|
Require change after setup with complexity requirements
|
🔗 Proof
|
Power-on, supervisor, and NVMe passwords; enterprise complexity policies enforced via AD/MDM
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Windows 11 Pro (Companion App: Lenovo Vantage)
|
| Hardware (CPU / GPU)
|
CPU: Intel Core Ultra 5 125U / Ultra 7 155U / 165U (12 cores, up to 4.9 GHz) • GPU: Intel Arc Graphics (integrated) + Intel AI Boost NPU (up to 11 TOPS)
|
| Memory & Storage
|
Memory: up to 32 GB LPDDR5X-6400 MHz (soldered, non-upgradeable) • Storage: up to 2 TB PCIe 4.0 NVMe SSD
|
| Power, Battery & Charging
|
Battery: 57 Wh • Power: 65 W USB-C slim adapter • Charging: USB-C PD
|
| Display & Camera
|
Display: 14" WUXGA (1920×1200) 60 Hz or 2.8K OLED (2880×1800) 120 Hz • Camera: FHD 1080p or 8 MP UHD + IR with ThinkShutter privacy shutte
|
| Sound & Connectivity
|
Sound: Dolby Atmos, stereo speakers • Connectivity: Wi-Fi 6E/7 (Intel BE200), Bluetooth 5.3, Thunderbolt 4 ×2, USB-A 3.2, HDMI 2.1
|
| Physical (Dimensions & Mass)
|
Dimensions: 312.8 × 214.75 × 14.96 mm • Mass: from 1.08 kg
|
21KC is the chassis model number for the Lenovo ThinkPad X1 Carbon Gen 12, a 2024 premium 14-inch business ultrabook. It is the 12th generation of the X1 Carbon line and Lenovo's flagship ultraportable.
Hardware: 14-inch 16:10 display, two panel options — WUXGA (1920 x 1200) 60 Hz or 2.8K OLED (2880 x 1800) 120 Hz. Powered by Intel Core Ultra series 1 (Meteor Lake) processors: Ultra 5 125U, Ultra 7 155U, or Ultra 7 165U (vPro on select SKUs). Integrated Intel Arc graphics with an Intel AI Boost NPU (up to 11 TOPS), making it a Copilot+ eligible AI PC. Memory is soldered LPDDR5X-6400 (up to 32 GB, non-upgradeable). Storage is one M.2 PCIe 4.0 NVMe slot (up to 2 TB). Battery is 57 Wh, charged over 65 W USB-C. Weight starts at 1.08 kg.
Security: this is an enterprise-grade business laptop. It features a discrete TPM 2.0 (TCG and FIPS 140-2 certified), match-on-chip fingerprint reader integrated into the keyboard, IR camera for Windows Hello facial recognition, a ThinkShutter physical camera privacy cover, Kensington Nano security slot, and a full BIOS password hierarchy (power-on, supervisor, NVMe). Select configurations include Intel vPro for remote management. BitLocker/Opal SED support via dTPM. Ships with Windows 11 Pro. Lenovo provides regular BIOS and firmware updates through Lenovo Vantage.
