Lenovo ThinkPad T540p User Manual page 139

Table 3. Security menu items (continued)
Menu item
UEFI BIOS Update Option
Security
Submenu item
Flash BIOS Updating by
End-Users
Secure RollBack Prevention
Security Chip
Security Reporting Options
Clear Security Chip
Intel TXT Feature
Selection
• Disabled
• Enabled
• Disabled
• Enabled
• Active
• Inactive
• Disabled
• Enter
• Disabled
• Enabled
Chapter 8
Comments
If you select Enabled,
all users can update the
UEFI BIOS. If you select
Disabled, only the person
who knows the supervisor
password can update the
UEFI BIOS.
If you select Disabled, you
can flash the older version
UEFI BIOS.
If you select Active, the
security chip is functional.
If you select Inactive, the
Security Chip option is
visible, but the security
chip is not functional. If
you select Disabled, the
Security Chip option is
hidden and the security
chip is not functional.
This option is available
when Security Chip is
active. It is used to enable
or disable the following
Security Reporting Options:
• BIOS ROM String
Reporting (Windows 7)
or UEFI ROM String
Reporting (Windows 8
and Windows 8.1): BIOS
text string
• CMOS Reporting:
CMOS data
• NVRAM Reporting:
Security data stored in
the Asset ID
• SMBIOS Reporting:
SMBIOS data
Clear the encryption key.
Note: This item is displayed
only if you have selected
Active for the Security
Chip option.
Enable or disable the
Intel Trusted Execution
Technology.
Note: This item is displayed
only if you have selected
Active for the Security
Chip option.
.
Advanced configuration
121