Lenovo ThinkPad P1 Extreme User Manual page 67

Description: Use this option to clear all keys and certificates in Secure Boot databases and install your
own keys and certificates.
Intel (R) SGX
• Intel (R) SGX Control
Values: Disabled, Enabled, Software Controlled
Description: Enable or disable the Intel Software Guard Extensions (SGX) function. If you select Software
Controlled, SGX will be controlled by SGX application for UEFI boot operating system.
• Owner EPOCH Change
Description: Change Owner EPOCH to a random value. Use this option to clear SGX user data.
Device Guard
• Device Guard
Values: Disabled, Enabled
Description: This option is used to support Microsoft Device Guard.
When this option is enabled, Intel Virtualization Technology, Intel VT-d Feature, Secure Boot, and OS
Optimized Defaults are automatically enabled. Boot order is not selectable. To complete the configuration
of Device Guard, you have to set a supervisor password.
When this option is disabled, the setup options are configurable and you can choose any boot options to
start the computer.
Startup menu
Note: The BIOS menu items might change without notice. Depending on the model, the default value might
vary.
• Boot
Description: Define the startup sequence.
• Network Boot
Description: Select the boot device when the system wakes from LAN. If Wake On LAN is enabled, the
network administrator can turn on all of the computers in a LAN remotely through network management
software.
• UEFI/Legacy Boot
Values: Both, UEFI Only, Legacy Only
Description: Define the system boot capability.
– UEFI/Legacy Boot Priority
Values: Legacy First, UEFI First
Description: Select the boot priority between UEFI and Legacy.
– CSM Support (for UEFI only)
Values: Yes, No
Description: Compatibility Support Module (CSM) is required for starting the legacy operating system. If
you select UEFI only, CSM Support is selectable. For Both or Legacy Only mode, CSM Support is
not selectable.
• Boot Mode
Values: Quick, Diagnostics
Description: Define which screen is displayed during the POST, the logo screen or the text message
screen.
.
Chapter 5 Advanced configuration
63