Lenovo 20JA User Manual page 69

Descriptions: Set a hard disk password to prevent unauthorized users from accessing data on the internal
storage drive. For more information, see "Passwords introduction" on page 39.
Security Chip
• Security Chip Type
Values: TPM 2.0
• Security Chip
Values: Enabled, Disabled
Descriptions: Enable or disable the security chip.
• Clear Security Chip
Descriptions: Use this option to clear the encryption key. It will not be possible to access already-
encrypted data after these keys are cleared.
Note: This item is displayed only if you have selected Enabled for the Security Chip option.
• Physical Presence for Clear
Values: Disabled, Enabled
Descriptions: If this option is enabled, a confirmation message is displayed when you clear the security
chip.
UEFI BIOS Update Option
• Flash BIOS Updating by End-Users
Values: Disabled, Enabled
Descriptions: When this option is enabled, all users can update the UEFI BIOS. If you disable this option,
only the person who knows the supervisor password can update the UEFI BIOS.
• Secure RollBack Prevention
Values: Disabled, Enabled
Descriptions: When this option is disabled, you can flash the UEFI BIOS to earlier version.
Note: This item is set as Disabled by default when the OS Optimized Defaults on the Restart menu is
set as Disabled. This item is set as Enabled by default when the OS Optimized Defaults is set as
Enabled.
• Windows UEFI Firmware Update
Values: Disabled, Enabled
Descriptions: Enable or disable the Windows UEFI Firmware Update feature. If you select Disabled, BIOS
will skip Windows UEFI Firmware Update and you can flash the UEFI BIOS to an earlier version.
Memory Protection
• Execution Prevention
Values: Disabled, Enabled
Descriptions: Some computer viruses and worms cause memory buffers to overflow. By enabling this
option, you can protect your computer against attacks from such viruses and worms. If the option is
enabled but you find that a program does not run properly, disable this option first and then reset the
settings.
Virtualization
• Intel Virtualization Technology
Values: Disabled, Enabled
.
Chapter 6 Advanced configuration
53