Lenovo 20EQS1LG00 User Manual page 91

Table 3. Security menu items (continued)
Menu item Submenu item
Power-On Password
Hard Disk X
Password
Fingerprint Predesktop
Authentication
Reader Priority
Security Mode
Password
Authentication
Reset Fingerprint
Data
Security Chip Security Chip
Selection
Security Chip
Value Comments
• Disabled Power-On Password prevents unauthorized
users from booting your computer. See
• Enabled
"Power-on password" on page 53.
• Disabled Hard Disk Password prevents unauthorized
users from accessing the date on the hard disk
• Enabled
drive. In addition to the user hard disk password,
an optional master hard disk password can be
used to give access to an administrator. See
"Hard disk passwords" on page 55.
• Disabled Enable or disable fingerprint authentication
before the operating system is loaded.
• Enabled
• External ➙ If External ➙ Internal is selected, an external
Internal fingerprint reader is used if attached. Otherwise,
an internal fingerprint reader is used. If Internal
• Internal Only
Only is selected, an internal fingerprint reader
is used.
• Normal If fingerprint authentication fails, you still can
start the computer by entering a password. If
• High
you have selected Normal, enter a power-on
password or a supervisor password; if you have
selected High, enter a supervisor password.
• Disabled Enable or disable password authentication.
This item is displayed only if you have selected
• Enabled
High for the Security Mode option.
Note: This item is displayed when Security
Mode is set to High.
• Enter This option is used to erase all fingerprint data
stored in the fingerprint reader and reset settings
to the factory state. As a result, any power-on
security features previously enabled will not be
able to work until they are re-enabled in the
fingerprint software.
• Discrete TPM If you select Discrete TPM, you can use a
discrete TPM chip with TPM 1.2 mode. If you
• Intel PTT
select Intel PTT, you can use Intel Platform
Trusted technology (PTT) with TPM 2.0 mode.
If you change from Intel PTT to Discrete TPM,
a message pops up that all encryption keys will
be cleared in the security chip. If you want to
continue, select Yes.
If you change from Discrete TPM to Intel PTT, a
message pops up that all encryption keys will be
cleared in the security chip. Intel AMT and Intel
TXT are disabled when the security chip is set
to Intel PTT. If you want to continue, select Yes.
Note: Intel PTT can be used with the Windows
8 or later operating system.
• Active If you select Active, the security chip is
functional. If you select Inactive, the security
• Inactive
.
Chapter 6 Advanced configuration
75