Startup Menu - Lenovo ThinkPad T460 User Manual

Table 3. Security menu items (continued)
Menu item Submenu item
Secure Boot Secure Boot
Platform Mode
Secure Boot Mode
Reset to Setup Mode
Restore Factory
Keys
Clear All Secure
Boot Keys
Intel SGX Control Intel SGX Control

Startup menu

To change the startup settings of your computer, select the Startup tab from the ThinkPad Setup menu.
Attention:
• After you change the startup sequence, ensure that you select a correct device during a copy, a save, or a
format operation. Otherwise your data might be erased or overwritten.
• If you are using the BitLocker drive encryption, do not change the startup sequence. BitLocker drive
encryption locks the computer from starting once detects the change of startup sequence.
To change the startup sequence temporarily so that the computer starts from a desired drive, do the following:
1. Turn off the computer.
2. Turn on the computer. When the Lenovo logo is displayed, press F12.
Value Comments
• Disabled Enable or disable the UEFI Secure Boot feature.
Select Enable to prevent unauthorized operating
• Enabled
systems from running at boot time. Select
Disabled to allow any operating systems to run
at boot time.
• Setup Mode Specify the system operating mode.
• User Mode
• Standard Mode Specify the Secure Boot mode.
• Custom Mode
This option is used to clear the current platform
key and put the system into Setup Mode. You
can install your own platform key and customize
the Secure Boot signature databases in Setup
Mode.
Secure Boot mode will be set to Custom Mode.
This option is used to restore all keys and
certificates in Secure Boot databases to factory
defaults. Any customized Secure Boot settings
will be erased, and the default platform key
will be re-established along with the original
signature databases including certificate for the
Windows 8 and Windows 10 operating systems.
This option is used to clear all keys and
certificates in Secure Boot databases. You
can install your own keys and certificates after
selecting this option.
• Disabled This option enables or disables Intel Software
Guard Extensions (SGX) function.
• Enabled
• Software
Disabled: Disables SGX.
Controlled
Enabled: Enables SGX.
Software Controlled: Software Guard
Extensions will be controlled by the operating
system.
.
Chapter 6 Advanced configuration
87