Lenovo ThinkPad X230 User Manual page 135

Table 6. Security menu items (continued)
Menu item
Submenu item
Password
Authentication
Reset Fingerprint Data
Security Chip Security Chip
Security Reporting
Options
Clear Security Chip
Intel TXT Feature
Physical Presence for
Provisioning
Physical Presence for
Clear
UEFI BIOS Flash UEFI Updating by
End-Users
Update Option
Secure RollBack
Prevention
Memory Execution Prevention
Protection
Value
Comments
• Disabled Enable or disable password authentication.
If high security mode is selected, this item is
• Enabled
displayed.
• Enter This option is used to erase all fingerprint data
stored in the fingerprint reader and reset settings
to the factory state. As a result, any power-on
security features previously enabled will not be
able to work until they are re-enabled in the
fingerprint software.
• Active If you select Active, the security chip is functional.
If you select Inactive, the Security Chip option
• Inactive
is visible, but the security chip is not functional. If
• Disabled
you select Disabled, the Security Chip option is
hidden and the security chip is not functional.
Enable or disable the following Security Reporting
Options:
• BIOS ROM String Reporting: BIOS text string
• ESCD Reporting: Extended system
configuration data
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security data stored in
the Asset ID
• SMBIOS Reporting: SMBIOS data
• Enter
Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
• Disabled Enable or disable Intel Trusted Execution
Technology.
• Enabled
• Disabled This option enables or disables the confirmation
message when you change the settings of the
• Enabled
security chip.
• Disabled This option enables or disables the confirmation
message when you clear the security chip.
• Enabled
• Disabled If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
• Enabled
person who knows the supervisor password can
update the UEFI BIOS.
• Disabled If you select Disabled, end-user can flash the
older version UEFI BIOS. If you select Enabled,
• Enabled
end-user cannot flash the older version UEFI
BIOS.
• Disabled Some computer viruses and worms cause
memory buffers to overflow. By selecting
• Enabled
Enabled you can protect your computer against
attacks by such viruses and worms. If after
choosing Enabled you find that an application
program does not run correctly, select Disabled
and reset the setting.
.
Chapter 8 Advanced configuration
117