Status

1. Active: The device is fully onboarded, provisioned, and actively reporting data.
   
2. Pending: This status may occur for one three reasons: 
   
   
1. The UEFI/BIOS on the device requires an update. Please update the UEFI/BIOS to ensure that Thinkshield Fimware Assurance can retrieve the BIOS logs. Your can find your device's BIOS version at https://support.lenovo.com/. Enter your device model or machine type to download the appropriate version.  
2. A license needs to be assigned to the device.
   
3. An issue occurred during onboarding or provisioning. In this case, you must onboard the device again.
   

1. Unsupported: The device is not on the list of supported models. Please ensure that only supported devices are onboarded. If an unsupported device is added to the platform, it will not report any data.
   
2. Eligible: The device does not have a TSFA license but qualifies for one.
   
   

Security Posture Status

1. Healthy: No issues have been detected recently.
2. Unhealthy: Firmware elements are corrupt.
3. Suspect: A potential issue has been identified. Check the event log.
4. Uninitiated: No security-related events have been reported yet.
   

Security Posture Status Calculation

The system calculates the Security Posture Status using the Subcomponent Code Measurement as a baseline, evaluating the most recent events reported by the EC (Embedded Controller).

Status Definitions and Calculation Criteria

1. Display Healthy status if:

1. The latest Subcomponent Code Measurement reported a Pass for every subcomponent,
   AND
2. No Subcomponent Self-Healing Events have been detected since the last measurement.
   

2. Display Unhealthy status if:

1. One or more subcomponents returned Fail in the latest Subcomponent Code Measurement.
2. A Device Firmware Failure Event reported a Firmware Corruption Detected status.
3. A runtime intrusion into SPI Flash was detected (Enhanced EC with SAF).
   

3. Display Suspect status if:

1. Any of the following events have been detected in the past 7 days with any status:
   
1. BIOS Password Change Event
   
2. System Preboot Authentication Event
   
3. BIOS Setup Configuration Change Event
4. Device Change Event
5. Log Cleared Event
6. Flash Update Event
7. POST Error Event
8. Set On-Premise Event
9. Capsule Update Event
10. TPM PCR Change
11. BIOS Mode Change
12. BIOS Version Change
13. Secure Boot Status Change
14. Drive Encryption Status Change
15. Disk Drive Firmware Version Change
2. A System Tamper Event with Event Type: Open was detected.
3. A System Preboot Authentication Event with Fail status occurred.
4. A Device Firmware Failure Event reported Hardware Not Found or Hardware Response Timeout statuses.
5. One or more successful Subcomponent Self-healing Events occurred,
   AND
6. The latest Subcomponent Code Measurement reported a Pass for all subcomponents.
   

1. No logs contributing to this status exist.
2. No event logs are present yet.