Lenovo ThinkPad L430 User Manual page 133

Table 5. Security menu items (continued)
Menu item
Security Chip
UEFI BIOS Update
Option
Memory Protection
Virtualization
Submenu item Selection
Security Chip • Active
• Inactive
• Disabled
Security
Reporting
Options
Clear Security • Enter
Chip
Physical • Disabled
Presence for
• Enabled
Provisioning
Physical • Disabled
Presence for
• Enabled
Clear
Flash BIOS • Disabled
Updating by
• Enabled
End-Users
Secure RollBack • Disabled
Prevention
• Enabled
Execution • Disabled
Prevention
• Enabled
Intel Virtualization • Disabled
Technology
• Enabled
Intel VT-d Feature • Disabled
• Enabled
Comments
If you select Active, the security chip
is functional. If you select Inactive, the
security chip option is displayed but the
security chip is not functional. If you select
Disabled, the security chip option is hidden
and the security chip is not functional.
Enable or disable the following Security
Reporting Options:
• BIOS ROM String Reporting: BIOS text
string
• ESCD Reporting: Extended system
configuration data
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security data stored
in the Asset ID
• SMBIOS Reporting: SMBIOS data
Clear the encryption key.
Note: The item is displayed only if you
have selected Active for the Security Chip
option.
This option enables or disables the
confirmation message when you change
the settings of the security chip.
This option enables or disables the
confirmation message when you clear the
security chip.
If you select Enabled, all users can update
the UEFI BIOS. If you select Disabled,
only the person who knows the supervisor
password can update the UEFI BIOS.
If you select Disabled, end-user can flash
older version of the UEFI BIOS. If you select
Enabled, end-user can not flash older
version of the UEFI BIOS.
Use the Data Execution Prevention feature
to protect your computer against attacks
from viruses and worms by selecting
Enabled. If you find that the program does
not run correctly after choosing Enabled
select Disabled and reset the setting.
If you select Enabled, a Virtual Machine
Monitor (VMM) can utilize the additional
hardware capabilities provided by Intel
Virtualization Technology.
Intel VT-d is Intel Virtualization Technology
for Directed I/O. When enabled, a VMM can
utilize the platform infrastructure for I/O
virtualization.
.
Chapter 8 Advanced configuration
117