My X40 has TPM and came with some Thinkpad-specific system software. I had the older Client Security Solution set up, doing its own user authentication instead of the standard WinXP logon. It also came with SafeGaurd PrivateDisk. I set up a 100MB encrypted partition for testing, and copies a bunch of files onto it, although I also had TrueCrypt (Free software, source available) installed.
This morning I tried to upgrade this Thinkpad-specific system software via the Internet from the IBM/Lenovo support site. It was not exactly smooth. The upgrade software died a few times and did not recover quite gracefully. It took all day. I eventually got most of the stuff upgraded, althou the ethernet driver failed to upgrade. I downloaded the file directly from the website, and installed it manually.
Then I realized that I could no longer mount the SafeGuard partition. Not until I read the instructions from the support website did I discover that Client Security Solution 8.0 does not support PrivateDisk. Good thing I set up the partition solely for testing purpose and there is nothing important on that encrypted partition, otherwise I would have to somehow downgrade or rollback to the previous version (which may not be available or possible) or install the commercial SafeGuard software in order to get my data.
Caveat Emptor.