Troubleshooting TSFA

Troubleshooting TSFA

TSFA device issues are typically related to compatibility, provisioning, or communication between the device and the system. Use the device status and security posture values to identify and troubleshoot these conditions.

Device Status Issues

BIOS Outdated

Description
The device BIOS version is not supported/requires an update.
Cause
TSFA requires communication between the BIOS and the Embedded Controller (EC). If the BIOS version does not support this interaction, the device cannot provide the required data. 
Resolution
  1. Verify the current BIOS version on the device. You can find your device’s BIOS version at https://support.lenovo.com/ by entering the device model or machine type.
  2. Update the BIOS to a supported version
  3. Ensure the BIOS supports EC communication
After updating the BIOS, the device may move to a supported status if all other requirements are met.

Unsupported

Description
The device model is not supported by TSFA.
Cause
TSFA supports only specific machine types that have been validated and approved. If the device model is not whitelisted, TSFA cannot be provisioned on the device. For more information, see Supported Devices in TSFA.
Resolution
  1. Verify the device model (machine type)
  2. Confirm that the model is supported by TSFA

Pending

Description
Onboarding or provisioning is incomplete or has failed.
Cause
A device may remain in this state if:
  1. Onboarding or provisioning has not completed successfully. 
  2. Plugin installation failed
  3. The device cannot fully communicate with the system 
Resolution
  1. Confirm that the device is successfully onboarded / Re- onboard the device.
  2. Verify that the TSFA plugin installation completed
  3. Ensure the device can communicate with the system
Once provisioning completes successfully, the device can move to Active.

Security Posture Issues

Uninitialized

Description
The device is not reporting data correctly.
Cause
This occurs when:
  1. The TSFA plugin is installed
  2. The device is onboarded
  3. But the device cannot send data from the Embedded Controller (EC) to the system 
Resolution
  1. Verify communication between the device and the system
  2. Ensure BIOS and EC interaction is functioning correctly
  3. Confirm that the device is able to send events
Once the device starts reporting data, posture evaluation resumes.

Unhealthy

Description
Configuration or security issues are detected, e.g. firmware elements are corrupt
Cause
The device is:
  1. Successfully reporting events
  2. Evaluated based on predefined rules
  3. Identified as having non-compliant or invalid conditions
Resolution
  1. Review detected issues or events associated with the device
  2. Identify configuration or integrity problems
  3. Apply corrective actions to resolve the underlying issue
The posture updates automatically after changes are made and new events are processed.

Suspect

Description
Potential risk is identified.
Cause
The device is:
  1. Reporting events normally
  2. Evaluated using predefined rules
  3. Classified as a potential risk based on event patterns
Resolution
  1. Check the event log; a recent event might indicate a problem.
  2. Investigate abnormal patterns or conditions
  3. Monitor the device or take corrective action as needed
The posture is updated when new events are received and evaluated.

Event Reporting Issues

No data or missing updates

Description
Device data is not updating or appears inconsistent.
Cause
TSFA relies on events generated by devices. If events are not received, posture cannot be updated. 
Resolution
  1. Verify that the TSFA plugin is installed
  2. Confirm that the device is online and communicating
  3. Ensure the device can send events successfully
TSFA processes events continuously, and posture is updated when new events are received.

    • Related Articles

    • Troubleshooting & Frequently Asked Questions

      I am unable to login to the portal; my username or password is incorrect. What should I do? Your login credentials must match the login setup in Lenovo ID/Lenovo Passport. If you are still having problems logging in, reset the Lenovo ID password and ...

    • TSFA Settings

      Managing Incident Severity and Notifications Settings are available for Org Admins and IT Admins under Configurations & Settings > Organization Settings > TSFA Settings. It allows to customize alert preferences by incident severity: Low and higher, ...

    • Getting Started with TSFA

      ThinkShield Firmware Assurance (TSFA) evaluates device security posture based on events generated by devices. TSFA can be used independently. A TSFA license is required to use TSFA functionality, whether it is used on its own or together with Lenovo ...

    • Using the Dashboard in TSFA

      The Dashboard is the main entry point to ThinkShield Firmware Assurance. It provides a centralized view of device fleet data through graphs and visuals, helping users quickly understand trends and key metrics. Organizations with a ThinkShield ...

    • Using System Update

      This feature allows Org Admins, IT Admins and MSP Admins to centrally manage Windows BIOS, drivers and firmware updates on any Lenovo Windows device. Updates are checked in three scenarios: When new devices are claimed and licensed. On-demand from ...