Lenovo ThinkPad Yoga 260 User Manual page 96

Table 4. Security menu items (continued)
Menu item Submenu item
Security Chip Security Chip
Selection
Security Chip
Clear Security Chip
Intel(R) TXT Feature
Intel(R) TXT Feature
Physical Presence
for Provisioning
Physical Presence
for Clear
UEFI BIOS Update Flash BIOS Updating
Option by End-Users
Secure RollBack
Prevention
80
ThinkPad Yoga 260 User Guide
Value Comments
• Discrete TPM If you select Discrete TPM, you can use a
discrete TPM chip with TPM 1.2 mode. If you
• Intel PTT
select Intel PTT, you can use Intel Platform
Trusted technology (PTT) with TPM 2.0 mode.
Note:
Intel PTT can be used with Windows 8 or later
operating system.
• Active If you select Active, the security chip is
functional. If you select Inactive, the Security
• Inactive
Chip is visible, but the security chip is not
• Disabled
functional. If you select Disabled, the Security
Chip is hidden and the security chip is not
(For Discrete TPM)
functional.
• Enabled If you select Enabled, the security chip is
functional. If you select Disabled, the security
• Disabled
chip is hidden and not functional.
(For Intel PTT)
• Enter Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Enable or disable the Intel Trusted Execution
Technology.
• Enabled
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Note: This item is unselectable when Intel PTT
is enabled.
Unselectable for Intel PPT.
• Disabled Enable or disable the confirmation message
when you change the settings of the security
• Enabled
chip.
• Disabled
Enable or disable the confirmation message
when you clear the security chip.
• Enabled
• Disabled
If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled
If you select Disabled, you can flash to an
earlier version of the UEFI BIOS.
• Enabled
If you select Enabled, you cannot flash to an
earlier version of the UEFI BIOS.
Note: This item is set as Disabled by default
when the OS Optimized Defaults on the
Restart menu is set as Disabled. This item
is set as Enabled by default when the OS
Optimized Defaults is set as Enabled.