Lenovo ThinkPad X1 Carbon User Manual page 90

Table 6. Security menu items (continued)
Menu item
Memory Protection
Virtualization
Anti-Theft
76
User Guide
Submenu item
Execution Prevention
Intel Virtualization
Technology
Intel VT-d Feature
Intel AT Module Activation
Intel AT Suspend
Selection
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
• Disabled
• Enabled
• Permanently Disabled
• Enter
Comments
Some computer viruses
and worms cause memory
buffers to overflow by
running code where only
data is allowed. If the
Data Execution Prevention
feature can be used with
your operating system, then
by selecting Enabled you
can protect your computer
against attacks by such
viruses and worms. If after
choosing Enabled you find
that an application program
does not run correctly,
select Disabled and reset
the setting.
If you select Enabled, a
Virtual Machine Monitor
(VMM) can utilize the
additional hardware
capabilities provided by
Virtualization Technology.
Intel VT-d is Intel
Virtualization Technology
for Directed I/O. When
enabled, a VMM can utilize
the platform infrastructure
for I/O virtualization.
Note: This submenu is not
supported in models with
an AMD CPU.
Enable or disable the UEFI
BIOS interface to activate
the Intel AT module, which
is an optional Anti-Theft
service from Intel.
Note: If you set the Intel
AT module activation to
Permanently Disabled,
you will be unable to enable
this setting again.
This option is displayed
only when the anti-theft
function is activated.
The Intel anti-theft suspend
screen will be displayed
at next boot to enter the
suspend mode.