Startup Menu - Lenovo ThinkPad 11e 3rd Gen User Manual

Table 3. Security menu items (continued)
Menu item
Intel SGX

Startup menu

To change the startup settings of your computer, select the Startup tab from the ThinkPad Setup menu.
Attention:
• After you change the startup sequence, ensure that you select a correct device during a copy, a save, or a
format operation. Otherwise your data might be erased or overwritten.
• If you are using the BitLocker drive encryption, you should not change the startup sequence. BitLocker
drive encryption locks the computer from starting once detects the change of startup sequence.
68
ThinkPad 11e 3rd Gen and ThinkPad Yoga 11e 3rd Gen User Guide
Submenu item
Restore Factory Keys
Clear All Secure Boot Keys
Intel SGX Control
Owner EPOCH Change
Value
• Disabled
• Enabled
• Software Controlled
Comments
Secure Boot signature
databases in Setup Mode.
Secure Boot mode will be
set to Custom Mode.
This option is used to
restore all keys and
certificates in Secure
Boot databases to factory
default settings. Any
customized Secure Boot
settings will be erased,
and the default platform
key will be re-established
along with the original
signature databases
including certificate for
the Windows 10 operating
system.
This option is used to clear
all keys and certificates in
Secure Boot databases.
You can install your own
keys and certificates after
selecting this option.
Enable or disable the Intel
Software Guard Extensions
(SGX) function.
If Software Controlled
is selected, SGX will be
controlled by the SGX
application for UEFI boot
OS.
Note: This item is available
only on Intel Skylake-based
computer models.
Change Owner EPOCH to
a new random value.
This option is used to clear
user data of SGX.
Note: This item is available
only on Intel Skylake-based
computer models.