Lenovo ThinkPad T430s User Manual page 140

Table 6. Security menu items (continued)
Menu item Submenu item
Security Chip Security Chip
Security Reporting
Options
Clear Security Chip
Intel TXT Feature
Physical Presence for
Provisioning
Physical Presence for
Clear
UEFI BIOS Flash UEFI Updating by
Update Option End-Users
Secure RollBack
Prevention
Memory Execution Prevention
Protection
Virtualization Intel Virtualization
Technology
Intel VT-d Feature
124
User Guide
Value Comments
• Active If you select Active, the security chip is functional.
If you select Inactive, the security chip option
• Inactive
is visible, but is not functional. If you select
• Disabled
Disabled, the security chip is hidden and the
option is not functional.
Enable or disable the following Security Reporting
Options:
• BIOS ROM String Reporting: BIOS text string
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security data stored in
the Asset ID
• SMBIOS Reporting: SMBIOS data
• Enter
Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the security chip option.
• Disabled Enable or disable Intel Trusted Execution
Technology.
• Enabled
• Disabled This option enables or disables the confirmation
message when you change the settings of the
• Enabled
security chip.
• Disabled
This option enables or disables the confirmation
message when you clear the security chip.
• Enabled
• Disabled If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled If you select Disabled, end-user can flash the
older version UEFI BIOS. If you select Enabled,
• Enabled
end-user cannot flash the older version UEFI
BIOS.
• Disabled Some computer viruses and worms cause
memory buffers to overflow by running code
• Enabled
where only data is allowed. If the Data Execution
Prevention feature can be used with your
operating system, then by selecting Enabled
you can protect your computer against attacks
by such viruses and worms. If after choosing
Enabled you find that program does not run
correctly, select Disabled and reset the setting.
• Disabled
If you select Enabled, a VMM (Virtual Machine
Monitor) can utilize the additional hardware
• Enabled
capabilities provided by Intel Virtualization
Technology.
• Disabled Intel VT-d stands for Intel Virtualization Technology
for Directed I/O. When enabled, a VMM can utilize
• Enabled
the platform infrastructure for I/O virtualization.