Descriptions:Setapower-onpasswordtoprotectthecomputerfromunauthorizedaccess.Formore
information,see“Passwordsintroduction”onpage37
.
•HardDiskxPassword
Values:Disabled,Enabled
Descriptions:Setaharddiskpasswordtopreventunauthorizedusersfromaccessingdataontheinternal
storagedrive.Formoreinformation,see“Passwordsintroduction”onpage37
.
SecurityChip
•SecurityChipType
Value(fordiscreteTPMchip):TPM2.0
Value(fornondiscreteTPMchip):IntelPTT(formodelswithIntelCPU),AMDfTPM(formodelswith
AMDCPU)
•SecurityChip
Values:Enabled,Disabled
Descriptions:Enableordisablethesecuritychip.
•ClearSecurityChip
Descriptions:Usethisoptiontocleartheencryptionkey.
•PhysicalPresenceforClear
Values:Disabled,Enabled
Descriptions:Ifthisoptionisenabled,aconfirmationmessageisdisplayedwhenyouclearthesecurity
chip.
UEFIBIOSUpdateOption
•FlashBIOSUpdatingbyEnd-Users
Values:Disabled,Enabled
Descriptions:Whenthisoptionisenabled,alluserscanupdatetheUEFIBIOS.Ifyoudisablethisoption,
onlythepersonwhoknowsthesupervisorpasswordcanupdatetheUEFIBIOS.
•SecureRollBackPrevention
Values:Disabled,Enabled
Descriptions:Whenthisoptionisdisabled,youcanflashtheUEFIBIOStoearlierversion.
Note:ThisitemissetasDisabledbydefaultwhentheOSOptimizedDefaultsontheRestartmenuisset
asDisabled.ThisitemissetasEnabledbydefaultwhentheOSOptimizedDefaultsissetasEnabled.
MemoryProtection
•ExecutionPrevention
Values:Disabled,Enabled
Descriptions:Somecomputervirusesandwormscausememorybufferstooverflow.Byenablingthis
option,youcanprotectyourcomputeragainstattacksfromsuchvirusesandworms.Iftheoptionis
enabledbutyoufindthataprogramdoesnotrunproperly,disablethisoptionfirstandthenresetthe
settings.
Virtualization
•IntelVirtualizationT echnology
Values:Disabled,Enabled
Chapter5.Advancedconfiguration51