Lenovo ThinkPad 11e 3rd Gen User Manual page 77

Table 3. Security menu items (continued)
Menu item
UEFI BIOS Update Option
Submenu item
Clear Security Chip
Intel TXT Feature
* Unselectable when Intel
PTT is enabled.
Physical Presence for
Provisioning
Physical Presence for Clear
Flash BIOS Updating by
End-Users
Secure RollBack Prevention
Value
• Enter
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
Chapter 5
Comments
Note: This item is displayed
when Security Chip
Selection is set to Intel
PTT.
Clear the encryption key.
Note: This item is displayed
only if you have selected
Active or Enabled for the
Security Chip option.
Enable or disable Intel
Trusted Execution
Technology.
Notes:
• This item is available only
on Intel Skylake-based
computer models.
• This item is displayed
only if you have selected
Active or Enabled
for the Security Chip
option.
• This item is set to
disabled when Intel PTT
is enabled.
This option enables or
disables the confirmation
message when you change
the settings of the security
chip.
This option enables or
disables the confirmation
message when you clear
the security chip.
If you select Enabled,
all users can update the
UEFI BIOS. If you select
Disabled, only the person
who knows the supervisor
password can update the
UEFI BIOS.
If you select Disabled,
you can flash to an earlier
version of the UEFI BIOS.
If you select Enabled, you
cannot flash to an earlier
version of the UEFI BIOS.
Note: This item is set as
Disabled by default when
the OS Optimized Defaults
.
Advanced configuration
65