Lenovo S1 Yoga User Manual page 83

Table 4. Security menu items (continued)
Menu item
Security Chip
UEFI BIOS Update Option
Submenu item
Security Chip Selection
Security Chip
Security Reporting
Options
Clear Security Chip
Physical Presence for
Provisioning
Physical Presence for
Clear
Flash BIOS Updating by
End-Users
Secure RollBack
Prevention
Selection Comments
• Discrete TPM If you select Discrete TPM, you can
use a discrete TPM chip with TPM
• Intel PTT
1.2 mode.
If you select Intel PTT, you can use
Intel Platform Trusted Technology
with TPM 2.0 mode.
Note: The Intel PTT can be used
with Mircorosft Windows 8.1
operating system.
• Active If you select Active, the security
chip will be functional. If you select
• Inactive
Inactive, the Security Chip option
• Disabled
will be visible, but the security chip
will not be functional. If you select
Disabled, the Security Chip option
will be hidden and the security chip
will not be functional.
Enable or disable the following
Security Reporting Options:
• BIOS ROM Strings Reporting:
• CMOS Reporting: CMOS data
• NVRAM Reporting: Security
• SMBIOS Reporting: SMBIOS
Enter This option is used to clear
encryption keys. It will
not be possible to access
already-encrypted data after
these keys are cleared.
• Disabled This option enables or disables the
confirmation message when you
• Enabled
change the settings of the security
chip.
• Disabled This option enables or disables the
confirmation message when you
• Enabled
clear the security chip.
• Disabled If you select Enabled, all users can
update the UEFI BIOS. If you select
• Enabled
Disabled, only the person who
knows the supervisor password can
update the UEFI BIOS.
• Disabled (if If you select Disabled, you can flash
OS Optimized the older version of the UEFI BIOS.
Defaults is
Disabled)
• Enabled (if
OS Optimized
Chapter 7
BIOS text string
data stored in the Asset ID
data
.
Advanced configuration
69