Lenovo L530, L430, 24684XU manual Menu item Submenu item Selection Comments Security Chip

Table 5. Security menu items (continued)

Menu item	Submenu item	Selection		Comments
Security Chip	Security Chip	•	Active	If you select Active, the security chip
		•	Inactive	is functional. If you select Inactive, the
				security chip option is displayed but the
		•	Disabled
				security chip is not functional. If you select
				Disabled, the security chip option is hidden
				and the security chip is not functional.
	Security			Enable or disable the following Security
	Reporting			Reporting Options:
	Options			• BIOS ROM String Reporting: BIOS text
				string
				• ESCD Reporting: Extended system
				configuration data
				• CMOS Reporting: CMOS data
				• NVRAM Reporting: Security data stored
				in the Asset ID
				• SMBIOS Reporting: SMBIOS data
	Clear Security	•	Enter	Clear the encryption key.
	Chip			Note: The item is displayed only if you
				have selected Active for the Security Chip
				option.
	Physical	•	Disabled	This option enables or disables the
	Presence for	•	Enabled	confirmation message when you change
	Provisioning			the settings of the security chip.
	Physical	•	Disabled	This option enables or disables the
	Presence for	•	Enabled	confirmation message when you clear the
	Clear			security chip.
UEFI BIOS Update	Flash BIOS	•	Disabled	If you select Enabled, all users can update
Option	Updating by	•	Enabled	the UEFI BIOS. If you select Disabled,
	End-Users			only the person who knows the supervisor
				password can update the UEFI BIOS.
	Secure RollBack	•	Disabled	If you select Disabled, end-user can flash
	Prevention	•	Enabled	older version of the UEFI BIOS. If you select
				Enabled, end-user can not flash older
				version of the UEFI BIOS.
Memory Protection	Execution	•	Disabled	Use the Data Execution Prevention feature
	Prevention	•	Enabled	to protect your computer against attacks
				from viruses and worms by selecting
				Enabled. If you find that the program does
				not run correctly after choosing Enabled
				select Disabled and reset the setting.
Virtualization	Intel Virtualization	•	Disabled	If you select Enabled, a Virtual Machine
	Technology	•	Enabled	Monitor (VMM) can utilize the additional
				hardware capabilities provided by Intel
				Virtualization Technology.
	Intel VT-d Feature	•	Disabled	Intel VT-d is Intel Virtualization Technology
		•	Enabled	for Directed I/O. When enabled, a VMM can
				utilize the platform infrastructure for I/O
				virtualization.

Chapter 8. Advanced configuration 117