Lenovo ThinkPad T430 User Manual page 140

Table 6. Security menu items (continued)
Menu item
Submenu item
Security Chip Security Chip
Security Reporting
Options
Clear Security Chip
Intel TXT Feature
Physical Presence for
Provisioning
Physical Presence for
Clear
UEFI BIOS Flash BIOS Updating
Update Option by End-Users
Secure RollBack
Prevention
Memory Execution Prevention
Protection
Virtualization Intel Virtualization
Technology
Intel VT-d Feature
124
User Guide
Value
Comments
• Active If you select Active, the security chip is functional.
If you select Inactive, the Security Chip option
• Inactive
is visible, but the security chip is not functional. If
• Disabled
you select Disabled, the Security Chip option is
hidden and the security chip is not functional.
Enable or disable the following Security Reporting
Options:
• BIOS ROM String Reporting: BIOS text string
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security data stored in
the Asset ID
• SMBIOS Reporting: SMBIOS data
• Enter Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Enable or disable Intel Trusted Execution
Technology.
• Enabled
• Disabled
This option enables or disables the confirmation
message when you change the settings of the
• Enabled
security chip.
• Disabled This option enables or disables the confirmation
message when you clear the security chip.
• Enabled
• Disabled If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled If you select Disabled, you can flash to the
previous version of UEFI BIOS. If you select
• Enabled
Enabled, you can not flash to the previous
version of UEFI BIOS.
• Disabled Some computer viruses and worms cause
memory buffers to overflow by running code
• Enabled
where only data is allowed. If the Data Execution
Prevention feature can be used with your
operating system, then by selecting Enabled
you can protect your computer against attacks
by such viruses and worms. If after choosing
Enabled you find that an program does not run
correctly, select Disabled and reset the setting.
• Disabled If you select Enabled, a Virtual Machine Monitor
(VMM) can utilize the additional hardware
• Enabled
capabilities provided by Intel Virtualization
Technology.
• Disabled Intel VT-d is Intel Virtualization Technology for
Directed I/O. When enabled, a VMM can utilize
• Enabled
the platform infrastructure for I/O virtualization.