ThinkPad P50 - Page 97

Table 3. Security menu items (continued)
Menu item
Submenu item
Value
Comments
Clear Security Chip
• Enter
Clear the encryption key.
Note: This item is displayed only if you have
selected Active or Enabled for the Security
Chip option.
Intel TXT Feature
• Disabled
• Enabled
Enable or disable Intel Trusted Execution
Technology. Intel Trusted Execution Technology
is a hardware based security foundation to build
and maintain a chain if trust, to protect
information from software based attacks.
Note:
This item is displayed when Security Chip is set
to Active and Security Chip Selection is set to
Discrete TPM.
Intel TXT Feature
* Unselectable when
Intel PTT is enabled.
• Disabled
Unselectable when Intel PTT is enabled.
Note:
This item is displayed when Security Chip is set
to Enabled and Security Chip Selection is set to
Intel PTT.
Physical Presence
for Provisioning
• Disabled
• Enabled
This option enables or disables the confirmation
message when you change the settings of the
security chip.
Physical Presence
for Clear
• Disabled
• Enabled
This option enables or disables the confirmation
message when you clear the security chip.
UEFI BIOS Update
Option
Flash BIOS
Updating by End-
Users
• Disabled
• Enabled
If you select Enabled, all users can update the
UEFI BIOS. If you select Disabled, only the
person who knows the supervisor password can
update the UEFI BIOS.
Secure RollBack
Prevention
• Disabled
• Enabled
If you select Disabled, you can flash the older
version UEFI BIOS.
Memory Protection Execution
Prevention
• Disabled
• Enabled
Some computer viruses and worms cause
memory buffers to overflow. By selecting
Enabled you can protect your computer against
attacks by such viruses and worms. If after
choosing Enabled you find that a program does
not run correctly, select Disabled and reset the
setting.
Virtualization Intel Virtualization
Technology
• Disabled
• Enabled
If you select Enabled, a Virtual Machine Monitor
(VMM) can utilize the additional hardware
capabilities provided by Intel Virtualization
Technology.
Intel VT-d Feature
• Disabled
• Enabled
Intel VT-d stands for Intel Virtualization
Technology for Directed I/O. When enabled, a
VMM can utilize the platform infrastructure for I/
O virtualization.
I/O Port Access
Ethernet LAN
• Disabled
• Enabled
If you select Enabled, you can use the Ethernet
LAN device.
Chapter 6. Advanced configuration 79