Lenovo ThinkPad X1 Carbon User Manual page 118

Table 7. Security menu items (continued)
Menu item Submenu item
UEFI BIOS Update Flash BIOS Update by
Option End-Users
Secure RollBack
Prevention
Security Chip Security Chip
Selection
Security Chip
Security Reporting
Options
Clear Security Chip
Intel TXT Feature
Physical Presence for
Provisioning
Physical Presence for
Clear
102
ThinkPad X1 Carbon User Guide
Value Comments
• Disabled If you select Enabled, all users can update
the UEFI BIOS. If you select Disabled,
• Enabled
only the person who knows the supervisor
password can update the UEFI BIOS.
• Disabled (If If you select Disabled, you can flash the older
OS Optimized version UEFI BIOS.
Defaults is set as
disabled.)
• Enabled (If
OS Optimized
Defaults is as
enabled.)
• Discrete TPM If you select Discrete TPM, you can use a
discrete TPM chip with TPM 1.2 mode. If you
• Intel PTT
select Intel PTT, you can use Intel Platform
Trusted technology (PTT) with TPM 2.0 mode.
Note:
Intel PTT can be used with Windows 8.1 or
later operating system.
• Active
If you select Active, the security chip is
functional. If you select Inactive, the Security
• Inactive
Chip option is visible, but the security chip
• Disabled
is not functional. If you select Disabled,
the Security Chip option is hidden and the
security chip is not functional.
This option is available when Security Chip
is active. It is used to enable or disable the
following Security Reporting Options:
• BIOS ROM String Reporting (Windows 7)
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security data stored
• SMBIOS Reporting: SMBIOS data
• Enter
Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Enable or disable the Intel Trusted Execution
Technology.
• Enabled
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled
Enable or disable the confirmation message
when you change the settings of the security
• Enabled
chip.
• Disabled Enable or disable the confirmation message
when you clear the security chip.
• Enabled
or UEFI ROM String Reporting (Windows
8.1): BIOS text string
in the Asset ID