ThinkPad P50 User Manual page 97

Table 3. Security menu items (continued)
Menu item
Submenu item
Clear Security Chip
Intel TXT Feature
Intel TXT Feature
* Unselectable when
Intel PTT is enabled.
Physical Presence
for Provisioning
Physical Presence
for Clear
UEFI BIOS Update Flash BIOS
Option Updating by End-
Users
Secure RollBack
Prevention
Memory Protection Execution
Prevention
Virtualization Intel Virtualization
Technology
Intel VT-d Feature
Ethernet LAN
I/O Port Access
Value
Comments
Clear the encryption key.
• Enter
Note: This item is displayed only if you have
selected Active or Enabled for the Security
Chip option.
Enable or disable Intel Trusted Execution
• Disabled
Technology. Intel Trusted Execution Technology
• Enabled
is a hardware based security foundation to build
and maintain a chain if trust, to protect
information from software based attacks.
Note:
This item is displayed when Security Chip is set
to Active and Security Chip Selection is set to
Discrete TPM.
Unselectable when Intel PTT is enabled.
• Disabled
Note:
This item is displayed when Security Chip is set
to Enabled and Security Chip Selection is set to
Intel PTT.
This option enables or disables the confirmation
• Disabled
message when you change the settings of the
• Enabled
security chip.
This option enables or disables the confirmation
• Disabled
message when you clear the security chip.
• Enabled
If you select Enabled, all users can update the
• Disabled
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
If you select Disabled, you can flash the older
• Disabled
version UEFI BIOS.
• Enabled
Some computer viruses and worms cause
• Disabled
memory buffers to overflow. By selecting
• Enabled
Enabled you can protect your computer against
attacks by such viruses and worms. If after
choosing Enabled you find that a program does
not run correctly, select Disabled and reset the
setting.
If you select Enabled, a Virtual Machine Monitor
• Disabled
(VMM) can utilize the additional hardware
• Enabled
capabilities provided by Intel Virtualization
Technology.
Intel VT-d stands for Intel Virtualization
• Disabled
Technology for Directed I/O. When enabled, a
• Enabled
VMM can utilize the platform infrastructure for I/
O virtualization.
If you select Enabled, you can use the Ethernet
• Disabled
LAN device.
• Enabled
.
Chapter 6 Advanced configuration
79