Lenovo ThinkPad P70 User Manual page 96

Table 3. Security menu items (continued)
Menu item
Submenu item
Internal Storage
Tamper Detection
Anti-Theft Computrace Module
Activation
Secure Boot Secure Boot
Platform Mode
Secure Boot Mode
Reset to Setup
Mode
Restore Factory
Keys
Clear All Secure
Boot Keys
Intel (R) SGX Intel (R) SGX Control
78
P70 User Guide
Value
Comments
If you select Enabled, removing any internal
• Disabled
storage device when your computer is in
• Enabled
sleep mode will be detected. If you remove
the internal storage device while the computer
is in sleep mode, the computer will shut down
when you wake it up, and any unsaved data
will be lost.
Enable or disable the UEFI BIOS interface to
• Disabled
activate the computrace module. Computrace
• Enabled
is an optional monitoring service from
Absolute Software.
• Permanently
Note: If you set the computrace module
Disabled
activation to Permanently Disabled, you will
be unable to enable this setting again.
Enable or disable the UEFI Secure Boot
• Disabled
feature. Select Enable to prevent
• Enabled
unauthorized operating systems from running
at boot time. Select Disabled to allow any
operating systems to run at boot time.
Specify the system operating mode.
• Setup Mode
• User Mode
Specify the Secure Boot mode.
• Standard Mode
• Custom Mode
This option is used to clear the current
platform key and put the system into Setup
Mode. You can install your own platform key
and customize the Secure Boot signature
databases in Setup Mode.
Secure Boot mode will be set to Custom
Mode.
This option is used to restore all keys and
certificates in Secure Boot databases to
factory defaults. Any customized Secure Boot
settings will be erased, and the default
platform key will be re-established along with
the original signature databases including
certificate for Windows 10 operating system.
This option is used to clear all keys and
certificates in Secure Boot databases. You
can install your own keys and certificates after
selecting this option.
This option enables or disables Intel Software
• Disabled
Guard Extensions (SGX) function.
• Enabled
Disabled: Disables SGX.
• Software
Enabled: Enables SGX.
Controlled
Software Controlled: Software Guard
Extensions will be controlled by the operating
system.