Lenovo 3444CUU manual Uefi Bios Update Option

Table 5. Security menu items (continued)

Submenu item	Selection		Comments
Security Chip	•	Active	If you select “Active,” Security Chip
	•	Inactive	is functional. If you select “Inactive,”
			Security Chip is visible, but is not
	•	Disabled
			functional. If you select “Disabled,”
			Security Chip is hidden and is not
			functional.
Security Reporting Options			Enable or disable the following
			Security Reporting Options.
			• BIOS ROM String Reporting: BIOS
			text string
			• ESCD Reporting: Extended
			system configuration data
			• CMOS Reporting: CMOS data
			• NVRAM Reporting: Security data
			stored in the Asset ID
			• SMBIOS Reporting: SMBIOS data
Clear Security Chip	•	Enter	Clear the encryption key.
			Note: Only if you select “Active” for
			Security Chip, this item appears.
Intel® TXT Feature	•	Disabled	Enable or disable Intel Trusted
	•	Enabled	Execution Technology.
UEFI BIOS Update Option
Flash BIOS Updating by End-Users	•	Disabled	If you select “Enabled,” all users
	•	Enabled	can update the UEFI BIOS. If you
			select “Disabled,” only the person
			who knows supervisor password can
			update the UEFI BIOS.
Flash Over LAN	•	Disabled	Enable your computer's UEFI BIOS to
	•	Enabled	be updated (flashed) over an active
			network connection.
Memory Protection
Execution Prevention	•	Disabled	Some computer viruses and worms
	•	Enabled	cause memory buffers to overflow
			by running code where only data
			is allowed. If the Data Execution
			Prevention feature can be used
			with your operating system, then by
			selecting “Enabled” you can protect
			your computer against attacks by
			such viruses and worms. If after
			choosing “Enabled” you find that an
			application program does not run
			correctly, select “Disabled” and reset
			the setting.
Virtualization

Chapter 8. Advanced configuration 111