Lenovo ThinkPad X1 Yoga User Manual page 89

Values: Setup Mode, User Mode
Descriptions: Specify the system operating mode.
• Secure Boot Mode
Values: Standard Mode, Custom Mode
Descriptions: Specify the Secure Boot mode.
• Reset to Setup Mode
Descriptions: Use this option to clear the current platform key and reset Platform Mode to Setup Mode.
You can install your own platform key and customize the Secure Boot signature databases in Setup
Mode. Secure Boot Mode will be set to Custom Mode.
• Restore Factory Keys
Descriptions: Use this option to restore all keys and certificates in Secure Boot databases to the
factory defaults.
• Clear All Secure Boot Keys
Descriptions: Use this option to clear all keys and certificates in Secure Boot databases and install
your own keys and certificates.
Intel (R) SGX
• Intel (R) SGX Control
Values: Disabled, Enabled, Software Controlled
Descriptions: Enable or disable the Intel Software Guard Extensions (SGX) function. If you select
Software Controlled, SGX will be controlled by the operating system.
• Change Owner EPOCH
Descriptions: Change Owner EPOCH to a random value. Use this option to clear SGX user data.
Device Guard
• Device Guard
Values: Disabled, Enabled
Descriptions: This option is used to support Microsoft Device Guard.
When this option is enabled, Intel Virtualization Technology, Intel VT-d Feature, Secure Boot, and OS
Optimized Defaults are automatically enabled. Boot order is not selectable. To complete the configuration
of Device Guard, you have to set a supervisor password.
When this option is disabled, the setup options are configurable and you can choose any boot options
to start the computer.
Startup menu
Note: The BIOS menu items might change without notice. Depending on the model, the default value
might vary.
• Boot
Descriptions: Define the startup sequence.
• Network Boot
Descriptions: Select the boot device when the system wakes from LAN. If Wake On LAN is enabled, the
network administrator can turn on all of the computers in a LAN remotely through network management
software.
• UEFI/Legacy Boot
Values: Both, UEFI Only, Legacy Only
.
Chapter 6 Advanced configuration
73