Lenovo ThinkPad P1 Extreme User Manual page 64

Description: Enable this option to use password authentication when fingerprints are not available. This
item is displayed if Security Mode is set to High.
• Reset Fingerprint Data
Value: Enter
Description: Use this option to erase all fingerprint data stored in the fingerprint reader and reset the
settings to the factory default state. As a result, any power-on security features previously enabled will not
work until they are re-enabled in the fingerprint software.
Security Chip
• Security Chip Type
Values: TPM 2.0
Description: You can use a discrete TPM chip with TPM 2.0 mode.
• Security Chip (for TPM 2.0)
Values: Enabled, Disabled
Description: Enable or disable the security chip.
• Security Reporting Options
– SMBIOS Reporting
Values: Enabled, Disabled
Description: When enabled, changes to corresponding UEFI BIOS data are logged in a location, (PCR1,
defined in the TCG standards), which other authorized programs can monitor, read and analyze.
• Clear Security Chip
Description: Use this option to clear the encryption key. It will not be possible to access already-encrypted
data after these keys are cleared.
• Intel (R) TXT Feature
Values: Disabled, Enabled
Description: Enable or disable the Intel Trusted Execution Technology.
• Physical Presence for Clear
Values: Disabled, Enabled
Description: If this option is enabled, a confirmation message is displayed when you clear the security
chip.
Note: This option may be bypassed by Windows 10 version 1709 or later operating systems.
UEFI BIOS Update Option
• Flash BIOS Updating by End-Users
Values: Disabled, Enabled
Description: When this option is enabled, all users can update the UEFI BIOS. If you disable this option,
only the person who knows the supervisor password can update the UEFI BIOS.
• Secure RollBack Prevention
Values: Disabled, Enabled
Description: When this option is disabled, you can flash the UEFI BIOS to earlier version.
Note: This item is set as Disabled by default when the OS Optimized Defaults on the Restart menu is
set as Disabled. This item is set as Enabled by default when the OS Optimized Defaults is set as
Enabled.
60
P1/X1 Extreme User Guide