Lenovo ThinkPad X380 Yoga User Manual page 83

Descriptions: Enable this option to use password authentication when fingerprints are not available. This
item is displayed if Security Mode is set to High.
• Reset Fingerprint Data
Value: Enter
Descriptions: Use this option to erase all fingerprint data stored in the fingerprint reader and reset the
settings to the factory default state. As a result, any power-on security features previously enabled will not
work until they are re-enabled in the fingerprint software.
Security Chip
• Security Chip Type
Values: TPM 2.0
Descriptions: You can use a discrete Trusted Platform Module (TPM) chip with TPM 2.0 mode.
• Security Chip
Values: Disabled, Enabled
Descriptions: Enable or disable the security chip.
• Security Reporting Options
– SMBIOS Reporting
Values: Enabled, Disabled
Descriptions: When enabled, changes to corresponding UEFI BIOS data are logged in a location,
(PCR1, defined in the TCG standards), which other authorized programs can monitor, read and analyze.
• Clear Security Chip
Descriptions: Use this option to clear the encryption key. It will not be possible to access already-
encrypted data after these keys are cleared.
• Intel (R) TXT Feature:
Values: Disabled, Enabled
Descriptions: Enable or disable the Intel Trusted Execution Technology.
• Physical Presence for Clear
Values: Disabled, Enabled
Descriptions: If this option is enabled, a confirmation message is displayed when you clear the security
chip.
UEFI BIOS Update Option
• Flash BIOS Updating by End-Users
Values: Disabled, Enabled
Descriptions: When this option is enabled, all users can update the UEFI BIOS. If you disable this option,
only the person who knows the supervisor password can update the UEFI BIOS.
• Secure RollBack Prevention
Values: Disabled, Enabled
Descriptions: When this option is disabled, you can flash the UEFI BIOS to earlier version.
• Windows UEFI Firmware Update
Values: Disabled, Enabled
Descriptions: This option enables or disables the Windows UEFI Firmware Update feature. Select
Enabled to allow Windows UEFI Firmware Update. Select Disabled to skip the Windows UEFI Firmware
Update.
.
Chapter 5 Advanced configuration
65