Lenovo ThinkPad X240s User Manual page 107

Table 5. Security menu items (continued)
Menu item
Submenu item
Security Chip Security Chip
Selection
Security Chip
Security Reporting
Options
Clear Security Chip
Intel TXT Feature
Physical Presence
for Provisioning
Physical Presence
for Clear
UEFI BIOS Update Flash BIOS Updating
Option by End-Users
Secure RollBack
Prevention
Memory Protection Execution
Prevention
Value
Comments
• Discrete TPM If you select Discrete TPM, you can use a
discrete TPM chip with TPM 1.2 mode. If you
• Intel PTT
select Intel PTT, you can use Intel Platform
Trusted technology (PTT) with TPM 2.0 mode.
Note: Intel PTT can be used with Windows 8 or
later operating system.
• Active If you select Active, the security chip is
functional. If you select Inactive, the Security
• Inactive
Chip option is visible, but the security chip
• Disabled
is not functional. If you select Disabled, the
Security Chip option is hidden and the security
chip is not functional.
Enable or disable the following Security
Reporting Options:
• BIOS ROM String Reporting (Windows 7)
• CMOS Reporting: CMOS data.
• NVRAM Reporting: Security data stored in
• SMBIOS Reporting: SMBIOS data.
• Enter
Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Enable or disable Intel Trusted Execution
Technology.
• Enabled
• Disabled This option enables or disables the confirmation
message when you change the settings of the
• Enabled
security chip.
• Disabled This option enables or disables the confirmation
message when you clear the security chip.
• Enabled
• Disabled If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled If you select Disabled, you can flash the older
version UEFI BIOS.
• Enabled
• Disabled Some computer viruses and worms cause
memory buffers to overflow. By selecting
• Enabled
Enabled you can protect your computer against
attacks by such viruses and worms. If after
choosing Enabled you find that a program does
not run correctly, select Disabled and reset the
setting.
or UEFI ROM String Reporting (Windows
8): BIOS text string.
the Asset ID.
.
Chapter 7 Advanced configuration
91