Table5.Securitymenuitems(continued)
SubmenuitemSelectionComments
SecurityChipActive
Inactive
Disabled
Ifyouselect“Active,”SecurityChip
isfunctional.Ifyouselect“Inactive,”
SecurityChipisvisible,butisnot
functional.Ifyouselect“Disabled,”
SecurityChipishiddenandisnot
functional.
SecurityReportingOptionsEnableordisablethefollowing
SecurityReportingOptions.
BIOSROMStringReporting:BIOS
textstring
ESCDReporting:Extended
systemcongurationdata
CMOSReporting:CMOSdata
NVRAMReporting:Securitydata
storedintheAssetID
SMBIOSReporting:SMBIOSdata
ClearSecurityChipEnterCleartheencryptionkey.
Note:Onlyifyouselect“Active”for
SecurityChip,thisitemappears.
Intel®TXTFeatureDisabled
Enabled
EnableordisableIntelTrusted
ExecutionTechnology.
UEFIBIOSUpdateOption
FlashBIOSUpdatingbyEnd-UsersDisabled
Enabled
Ifyouselect“Enabled,”allusers
canupdatetheUEFIBIOS.Ifyou
select“Disabled,”onlytheperson
whoknowssupervisorpasswordcan
updatetheUEFIBIOS.
FlashOverLANDisabled
Enabled
Enableyourcomputer'sUEFIBIOSto
beupdated(ashed)overanactive
networkconnection.
MemoryProtection
ExecutionPreventionDisabled
Enabled
Somecomputervirusesandworms
causememorybufferstooverow
byrunningcodewhereonlydata
isallowed.IftheDataExecution
Preventionfeaturecanbeused
withyouroperatingsystem,thenby
selecting“Enabled”youcanprotect
yourcomputeragainstattacksby
suchvirusesandworms.Ifafter
choosing“Enabled”youndthatan
applicationprogramdoesnotrun
correctly,select“Disabled”andreset
thesetting.
Virtualization
Chapter8.Advancedconguration111