Lenovo ThinkPad S5 User Manual page 80

Table 3. Security menu items (continued)
Menu item
UEFI BIOS Update Option
Memory Protection
Virtualization
64
ThinkPad E560p and S5 User Guide
Submenu item
Flash BIOS Updating by
End-Users
Secure RollBack Prevention
Execution Prevention
Intel Virtualization
Technology
Intel VT-d Feature
Selection
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
Comments
If you select Enabled,
all users can update the
UEFI BIOS. If you select
Disabled, only the person
who knows the supervisor
password can update the
UEFI BIOS.
If you select Disabled,
you can flash to an earlier
version of the UEFI BIOS.
If you select Enabled, you
cannot flash to an earlier
version of the UEFI BIOS.
Note: This item is set as
Disabled by default when
the OS Optimized Defaults
on the Restart menu is set
as Disabled. This item is
set as Enabled by default
when the OS Optimized
Defaults is set as Enabled.
Some computer viruses
and worms cause memory
buffers to overflow by
running code where only
data is allowed. If the
Data Execution Prevention
feature can be used with
your operating system, then
by selecting Enabled you
can protect your computer
against attacks by such
viruses and worms. If after
choosing Enabled you find
that a program does not run
correctly, select Disabled
and reset the setting.
If you select Enabled, a
Virtual Machine Monitor
(VMM) can utilize the
additional hardware
capabilities provided by
Virtualization Technology.
Note: This submenu is
available on models with an
Intel CPU.
Intel VT-d is Intel
Virtualization Technology
for Directed I/O. When
enabled, a VMM can utilize
the platform infrastructure
for I/O virtualization.