Lenovo 20AQ User Manual page 125

Table 5. Security menu items (continued)
Menu item
Submenu item
Security Chip Security Chip
Selection
Security Chip
Security Reporting
Options
Clear Security Chip
Intel TXT Feature
Physical Presence
for Provisioning
Physical Presence
for Clear
UEFI BIOS Update Flash BIOS Updating
Option by End-Users
Secure RollBack
Prevention
Value
Comments
able to work until they are re-enabled in the
fingerprint software.
• Discrete TPM If you select Discrete TPM, you can use a
discrete TPM chip with TPM 1.2 mode. If you
• Intel PPT
select Intel PTT, you can use Intel Platform
Trusted technology (PTT) with TPM 2.0 mode.
Note:
Intel PTT can be used with Windows 8 or later
operating system.
• Active
If you select Active, the security chip is
functional. If you select Inactive, the Security
• Inactive
Chip option is visible, but the security chip
• Disabled
is not functional. If you select Disabled, the
Security Chip option is hidden and the security
chip is not functional.
This option is available when Security Chip
is active. It is used to enable or disable the
following Security Reporting Options:
• BIOS ROM String Reporting (Windows 7) or
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security data stored in
• SMBIOS Reporting: SMBIOS data
• Enter
Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Enable or disable the Intel Trusted Execution
Technology.
• Enabled
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Enable or disable the confirmation message
when you change the settings of the security
• Enabled
chip.
• Disabled Enable or disable the confirmation message
when you clear the security chip.
• Enabled
• Disabled If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled If you select Disabled, you can flash the older
version UEFI BIOS.
• Enabled
UEFI ROM String Reporting (Windows 8):
BIOS text string
the Asset ID
.
Chapter 8 Advanced configuration
109