Lenovo ThinkPad T570 User Manual page 97

Descriptions: Enable this option to prevent unauthorized operating systems from loading when you
turn on the computer.
Note: To Enable Secure Boot, you need to set the startup setting to UEFI Only and CSM Support to No.
• Platform Mode
Values: Setup Mode, User Mode
Descriptions: Specify the system operating mode.
• Secure Boot Mode
Values: Standard Mode, Custom Mode
Descriptions: Specify the Secure Boot mode.
• Reset to Setup Mode
Descriptions: Use this option to clear the current platform key and reset Platform Mode to Setup Mode.
• Restore Factory Keys
Descriptions: Use this option to restore all keys and certificates in Secure Boot databases to the
factory defaults.
• Clear All Secure Boot Keys
Descriptions: Use this option to clear all keys and certificates in Secure Boot databases and install
your own keys and certificates.
Intel (R) SGX
• Intel (R) SGX Control
Values: Disabled, Enabled, Software Controlled
Descriptions: Enable or disable the Intel Software Guard Extensions (SGX) function. If you select
Software Controlled, SGX will be controlled by the SGX application for UEFI boot operating system.
• Change Owner EPOCH
Value: Enter
Descriptions: Change Owner EPOCH to a random value. Use this option to clear SGX user data.
Device Guard
• Device Guard
Values: Disabled, Enabled
Descriptions: This option is used to support Microsoft Device Guard.
When this option is enabled, Intel Virtualization Technology, Intel VT-d Feature, Secure Boot, and OS
Optimized Defaults are automatically enabled. Boot order is not selectable. To complete the configuration
of Device Guard, you have to set a supervisor password.
When this option is disabled, the setup options are configurable and you can choose any boot options
to start the computer.
Startup menu
Note: The BIOS menu items might change without notice. Depending on the model, the default value
might vary.
• Boot
Descriptions: Define the startup sequence.
• Network Boot
.
Chapter 6 Advanced configuration
81