Lenovo ThinkPad E570 - Page 69

Values:Disabled,xcharacters(4≤x≤12)
Descriptions:Specifyaminimumlengthforpower-onpasswordsandharddiskpasswords.Ifasupervisor
passwordisset,youcannotchangetheminimumlengthuntilyouloginasasupervisor.
•Power-OnPassword
Values:Disabled,Enabled
Descriptions:Setapower-onpasswordtoprotectthecomputerfromunauthorizedaccess.Formore
information,see“Passwordsintroduction”onpage39.
•HardDiskxPassword
Values:Disabled,Enabled
Descriptions:Setaharddiskpasswordtopreventunauthorizedusersfromaccessingdataontheinternal
storagedrive.Formoreinformation,see“Passwordsintroduction”onpage39.
SecurityChip
•SecurityChipType
Value(fordiscreteTPMchip):TPM2.0
Value(fornondiscreteTPMchip):IntelPTT(formodelswithIntelCPU),AMDfTPM(formodelswith
AMDCPU)
•SecurityChip
Values:Enabled,Disabled
Descriptions:Enableordisablethesecuritychip.
•ClearSecurityChip
Descriptions:Usethisoptiontocleartheencryptionkey.
•PhysicalPresenceforClear
Values:Disabled,Enabled
Descriptions:Ifthisoptionisenabled,aconfirmationmessageisdisplayedwhenyouclearthesecurity
chip.
UEFIBIOSUpdateOption
•FlashBIOSUpdatingbyEnd-Users
Values:Disabled,Enabled
Descriptions:Whenthisoptionisenabled,alluserscanupdatetheUEFIBIOS.Ifyoudisablethisoption,
onlythepersonwhoknowsthesupervisorpasswordcanupdatetheUEFIBIOS.
•SecureRollBackPrevention
Values:Disabled,Enabled
Descriptions:Whenthisoptionisdisabled,youcanflashtheUEFIBIOStoearlierversion.
Note:ThisitemissetasDisabledbydefaultwhentheOSOptimizedDefaultsontheRestartmenuisset
asDisabled.ThisitemissetasEnabledbydefaultwhentheOSOptimizedDefaultsissetasEnabled.
MemoryProtection
•ExecutionPrevention
Values:Disabled,Enabled
Descriptions:Somecomputervirusesandwormscausememorybufferstooverflow.Byenablingthis
option,youcanprotectyourcomputeragainstattacksfromsuchvirusesandworms.Iftheoptionis
enabledbutyoufindthataprogramdoesnotrunproperly,disablethisoptionfirstandthenresetthe
settings.
Chapter6.Advancedconfiguration53