Startup Menu - Lenovo ThinkPad Yoga 260 User Manual

Table 4. Security menu items (continued)
Menu item Submenu item
Anti-Theft Computrace Module
Activation
Secure Boot Secure Boot
Platform Mode
Secure Boot Mode
Reset to Setup Mode
Restore Factory
Keys
Clear All Secure
Boot Keys
Intel ® SGX Intel (R) SGX Control

Startup menu

To change the startup settings of your computer, select the Startup tab from the ThinkPad Setup menu.
Attention:
• After you change the startup sequence, ensure that you select a correct device during a copy, a save, or a
format operation. Otherwise your data might be erased or overwritten.
• If you are using the BitLocker drive encryption, do not change the startup sequence. BitLocker drive
encryption locks the computer from starting once detects the change of startup sequence.
82
ThinkPad Yoga 260 User Guide
Value Comments
• Disabled Enable or disable the UEFI BIOS interface to
activate the computrace module. Computrace
• Enabled
is an optional monitoring service from Absolute
• Permanently
Software.
Disabled
Note: If you set the computrace module
activation to Permanently Disabled, you will be
unable to enable this setting again.
• Disabled Enable or disable the UEFI Secure Boot feature.
Select Enable to prevent unauthorized operating
• Enabled
systems from running at boot time. Select
Disabled to allow any operating systems to run
at boot time.
• Setup Mode Specify the system operating mode.
• User Mode
• Standard Mode Specify the Secure Boot mode.
• Custom Mode
This option is used to clear the current platform
key and put the system into Setup Mode. You
can install your own platform key and customize
the Secure Boot signature databases in Setup
Mode.
Secure Boot mode will be set to Custom Mode.
This option is used to restore all keys and
certificates in Secure Boot databases to factory
defaults. Any customized Secure Boot settings
will be erased, and the default platform key
will be re-established along with the original
signature databases including certificate for the
Windows 8 and Windows 10 operating systems.
This option is used to clear all keys and
certificates in Secure Boot databases. You
can install your own keys and certificates after
selecting this option.
• Disabled
This option enables or disables Intel (R) Software
Guard Extension (SGX) function. Select
• Enabled
Disabled to disable SGX. Select Enable to
• Software
enable SGX. If you select Software Controlled,
Controlled
the Software Guard Extension will be controlled
by the operating system.