Lenovo S540 manual Anti-Theft, Secure Boot

Table 5. Security menu items (continued)

Menu item	Submenu item	Selection		Comments
	Microphone	•	Disabled	If you select Enabled, you can use
		•	Enabled	the microphone (internal, external,
				or line-in).
	NFC device	•	Disabled	If you select Enabled, you can use
		•	Enabled	the NFC device.
	Fingerprint Reader	•	Disabled	If you select Enabled, you can use
		•	Enabled	the fingerprint reader.
Anti-Theft	Intel AT Module Activation	•	Disabled	Enable or disable the UEFI BIOS
		•	Enabled	interface to activate the Intel AT
				module, which is an optional
		•	Permanently
				anti-theft service from Intel.
			Disabled
				Note: If you set the Intel AT
				module activation to Permanently
				Disabled, you will be unable to
				enable this setting again.
	Computrace	•	Disabled	Enable or disable the UEFI BIOS
		•	Enabled	interface to activate the computrace
				module. Computrace is an optional
		•	Permanently
				monitoring service from Absolute
			Disabled	Software.
				Note: If you set the computrace
				module activation to Permanently
				Disabled, you will be unable to
				enable this setting again.
Secure Boot	Secure Boot	•	Disabled (If OS	Enable or disable the Secure Boot
			Optimized is	feature. Select Enable to prevent
			Disabled)	unauthorized operating systems
		•	Enabled (If OS	from running at boot time. Select
				Disabled to allow any operating
			Optimized is
				systems to run at boot time.
			Enabled)
	Platform Mode	•	User Mode	Specify the system operating mode.
		•	Setup Mode
	Secure Boot Mode	•	Standard Mode	Specify the Secure Boot mode.
		•	Custom Mode
	Reset to Setup Mode	•	Yes	This option is used to clear the
		•	No	current platform key and put the
				system into setup mode. You
				can install your own platform key
				and customize the Secure Boot
				signature databases in setup mode.
				Secure Boot mode will be set to
				custom mode.
	Restore Factory keys	•	Yes	This option is used to restore all
		•	No	keys and certificates in Secure Boot
				databases to factory defaults. Any
				customized Secure Boot settings
				will be erased, and the default
				platform key will be re-established
				along with the original signature

Chapter 8. Advanced configuration 95