Lenovo ThinkPad T430s User Manual page 141

Table 6. Security menu items (continued)
Menu item
Submenu item
Security Chip Security Chip
Security Reporting
Options
Clear Security Chip
Intel TXT Feature
Physical Presence for
Provisioning
Physical Presence for
Clear
UEFI BIOS Flash BIOS Updating
Update Option by End-Users
Secure RollBack
Prevention
Memory Execution Prevention
Protection
Virtualization Intel Virtualization
Technology
Intel VT-d Feature
Value
Comments
• Active If you select Active, the security chip is
functional. If you select Inactive, the security
• Inactive
chip option is visible, but is not functional. If you
• Disabled
select Disabled, the security chip is hidden and
the option is not functional.
Enable or disable the following Security Reporting
Options:
• BIOS ROM String Reporting: BIOS text string
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security data stored in
the Asset ID
• SMBIOS Reporting: SMBIOS data
• Enter Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the security chip option.
• Disabled Enable or disable Intel Trusted Execution
Technology.
• Enabled
• Disabled
This option enables or disables the confirmation
message when you change the settings of the
• Enabled
security chip.
• Disabled This option enables or disables the confirmation
message when you clear the security chip.
• Enabled
• Disabled If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled If you select Enabled, you can choose to flash to
the previous version of the UEFI BIOS.
• Enabled
• Disabled Some computer viruses and worms cause
memory buffers to overflow by running code
• Enabled
where only data is allowed. If the Data Execution
Prevention feature can be used with your
operating system, then by selecting Enabled
you can protect your computer against attacks
by such viruses and worms. If after choosing
Enabled you find that an application program
does not run correctly, select Disabled and reset
the setting.
• Disabled
If you select Enabled, a VMM (Virtual Machine
Monitor) can utilize the additional hardware
• Enabled
capabilities provided by Intel Virtualization
Technology.
• Disabled Intel VT-d stands for Intel Virtualization
Technology for Directed I/O. When enabled, a
• Enabled
VMM can utilize the platform infrastructure for I/O
virtualization.
.
Chapter 8 Advanced configuration
123