ThinkPad E460 - Page 85

Table3.Securitymenuitems(continued)
Menuitem
SubmenuitemSelectionComments
SecureBoot
•Disabled
•Enabled
Disabledisthedefault
valuewhenOSOptimisezd
issettoDisabled.Enabled
isthedefaultvaluewhen
OSOptimisezdisset
toEnabled.
Enableordisablethe
UEFISecureBootfeature.
SelectEnabletoprevent
unauthorizedoperating
systemsfromrunningat
boottime.SelectDisabled
toallowanyoperating
systemstorunatboottime.
Note:ToenableSecure
Boot,youneedtosetthe
startupsettingasUEFI
OnlyandsetCSMSupport
asNo.
PlatformMode
•SetupMode
•UserMode
Specifythesystem
operatingmode.
SecureBootMode•StandardMode
•CustomMode
Specifythesystem
operatingmode.
ResettoSetupMode
•Yes
•No
Thisoptionisusedtoclear
thecurrentplatformkey
andputthesysteminto
SetupMode.Youcan
installyourownplatform
keyandcustomizethe
SecureBootsignature
databasesinSetupMode.
SecureBootmodewillbe
settoCustomMode.
RestoreFactorykeys•Yes
•No
Thisoptionisusedto
restoreallkeysand
certificatesinSecure
Bootdatabasestofactory
defaults.Anycustomized
SecureBootsettings
willbeerased,andthe
defaultplatformkeywillbe
re-establishedalongwith
theoriginalsignature
databasesincluding
certificateforWindows
10operatingsystems.
SecureBoot
ClearAllSecureBootKeys
•Yes
•No
Thisoptionisusedtoclear
allkeysandcertificatesin
SecureBootdatabases.
Youcaninstallyourown
keysandcertificatesafter
selectingthisoption.
Chapter6.Advancedconfiguration69