Lenovo 20EQS1LG00 User Manual page 92

Table 3. Security menu items (continued)
Menu item Submenu item
Clear Security Chip
Intel TXT Feature
Intel TXT Feature
* Unselectable when
Intel PTT is enabled.
Physical Presence
for Provisioning
Physical Presence
for Clear
UEFI BIOS Update Flash BIOS Updating
Option by End-Users
Secure RollBack
Prevention
Memory Protection Execution
Prevention
76
ThinkPad P50 User Guide
Value Comments
chip is visible, but it is not functional. If you
• Disabled
select Disabled, the security chip is hidden and
it is not functional.
Note: This item is displayed when Security Chip
Selection is set to Discrete TPM.
• Enabled If you select Enabled, the security chip is
functional. If you select Disabled, the security
• Disabled
chip is hidden and it is not functional.
(For Intel PTT)
Note: This item is displayed when Security Chip
Selection is set to Intel PTT.
• Enter Clear the encryption key.
Note: This item is displayed only if you have
selected Active or Enabled for the Security
Chip option.
• Disabled Enable or disable Intel Trusted Execution
Technology. Intel Trusted Execution Technology
• Enabled
is a hardware based security foundation to
build and maintain a chain if trust, to protect
information from software based attacks.
Note:
This item is displayed when Security Chip is set
to Active and Security Chip Selection is set to
Discrete TPM.
• Disabled Unselectable when Intel PTT is enabled.
Note:
This item is displayed when Security Chip is set
to Enabled and Security Chip Selection is set
to Intel PTT.
• Disabled This option enables or disables the confirmation
message when you change the settings of the
• Enabled
security chip.
• Disabled This option enables or disables the confirmation
message when you clear the security chip.
• Enabled
• Disabled If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled If you select Disabled, you can flash the older
version UEFI BIOS.
• Enabled
• Disabled Some computer viruses and worms cause
memory buffers to overflow. By selecting
• Enabled
Enabled you can protect your computer against
attacks by such viruses and worms. If after
choosing Enabled you find that a program does
not run correctly, select Disabled and reset the
setting.