Lenovo 370245U Menu item Submenu item Value Comments Password, Security Chip, Inactive, Enter

Table 2. Security menu items

Menu item	Submenu item	Value		Comments
Password	Hardware Password	•	Disabled	Managing your power-on password, supervisor
	Manager	•	Enabled	password, and your hard disk passwords by the
				management server.
	Supervisor Password	•	Disabled	See “Supervisor password” on page 32.
		•	Enabled
	Lock UEFI BIOS	•	Disabled	Enable or disable the function that protects items
	Settings	•	Enabled	in ThinkPad Setup program from being changed
				by a user who does not have the supervisor
				password. By default, this is set to Disabled. If
				you set the supervisor password and enable this
				function, no one but you can change any items
				in ThinkPad Setup.
	Password at	•	Disabled	If you select and enable Password at unattended
	unattended boot	•	Enabled	boot, a password prompt is displayed when
				the tablet is turned on, from either a power-off
				state or hibernation state. If you select Disabled,
				no password prompt is displayed; the tablet
				goes ahead and loads the operating system.
				To prevent unauthorized access, set the user
				authentication on the operating system.
	Password at restart	•	Disabled	If you select and enable Password at restart, a
		•	Enabled	password prompt is displayed when you restart
				the tablet. If you select Disabled, no password
				prompt is displayed; the tablet goes ahead
				and loads the operating system. To prevent
				unauthorized access, set the user authentication
				on the operating system.
	Set Minimum Length	•	Disabled	Specify a minimum length for power-on
		•	x characters	passwords and hard disk passwords. If you set
				the supervisor password and specify a minimum
			(4≤x≤12)
				length for passwords, no one but you can change
				the length.
	Power-On Password	•	Disabled	See “Power-on password” on page 30.
		•	Enabled
	Hard Disk 1 Password	•	Disabled	See “Hard disk passwords” on page 30.
		•	Enabled
Security Chip	Security Chip	•	Active	If you select Active, the security chip is functional.
		•	Inactive	If you select Inactive, the Security Chip option
				is visible, but the security chip is not functional. If
		•	Disabled
				you select Disabled, the Security Chip option is
				hidden and the security chip is not functional.
	Security Reporting	•	Disabled	Enable or disable the following Security Reporting
	Options	•	Enabled	Options:
				• BIOS ROM String Reporting: BIOS text string
				• CMOS Reporting: CMOS data
	Clear Security Chip	•	Enter	Clear the encryption key.
				Note: This item is displayed only if you have
				selected Active for the Security Chip option.

Chapter 6. Advanced configuration 45