Lenovo ThinkPad X270 User Manual page 95

Values: Disabled, Enabled
Descriptions: When this option is enabled, removing any internal storage device when your computer is in
sleep mode will be detected. If you remove the internal storage device while the computer is in sleep
mode, the computer will shut down when you wake it up, and any unsaved data will be lost.
Anti-Theft
• Computrace Module Activation
Values: Disabled, Enabled, Permanently Disabled
Descriptions: Enable the UEFI BIOS interface to activate the computrace module. Computrace is an
optional monitoring service from Absolute Software. If you select Permanently Disabled, you cannot
enable this setting again.
Secure Boot
• Secure Boot
Values: Disabled, Enabled
Descriptions: Enable this option to prevent unauthorized operating systems from loading when you
turn on the computer.
• Platform Mode
Values: Setup Mode, User Mode
Descriptions: Specify the system operating mode.
• Secure Boot Mode
Values: Standard Mode, Custom Mode
Descriptions: Specify the Secure Boot mode.
• Reset to Setup Mode
Descriptions: Use this option to clear the current platform key and reset Platform Mode to Setup Mode.
• Restore Factory Keys
Descriptions: Use this option to restore all keys and certificates in Secure Boot databases to the
factory defaults.
• Clear All Secure Boot Keys
Descriptions: Use this option to clear all keys and certificates in Secure Boot databases and install
your own keys and certificates.
Intel (R) SGX
• Intel (R) SGX Control
Values: Disabled, Enabled, Software Controlled
Descriptions: Enable or disable the Intel Software Guard Extensions (SGX) function. If you select
Software Controlled, SGX will be controlled by the operating system.
• Change Owner EPOCH
Value: Enter
Descriptions: Change Owner EPOCH to a random value. Use this option to clear SGX user data.
Device Guard
• Device Guard
Values: Disabled, Enabled
Descriptions: This option is used to support Microsoft Device Guard.
.
Chapter 6 Advanced configuration
79