Table5.Securitymenuitems(continued)
Menuitem
SubmenuitemSelectionComments
FlashBIOSUpdatingby
End-Users
•Disabled
•Enabled
IfyouselectEnabled,alluserscan
updatetheUEFIBIOS.Ifyouselect
Disabled,onlythepersonwho
knowsthesupervisorpasswordcan
updatetheUEFIBIOS.
UEFIBIOSUpdateOption
SecureRollBack
Prevention
•Disabled
•Enabled
IfyouselectDisabled,youcanflash
toanearlierversionoftheUEFI
BIOS.
IfyouselectEnabled,youcannot
flashtoanearlierversionoftheUEFI
BIOS.
Note:ThisitemissetasDisabled
bydefaultwhentheOSOptimized
DefaultsontheRestartmenuis
setasDisabled.Thisitemisset
asEnabledbydefaultwhenthe
OSOptimizedDefaultsissetas
Enabled.
MemoryProtectionExecutionPrevention•Disabled
•Enabled
Somecomputervirusesandworms
causememorybufferstooverflow.
ByselectingEnabledyoucan
protectyourcomputeragainst
attacksbysuchvirusesandworms.
Ifyoufindthatanapplication
programdoesnotruncorrectlyafter
choosingEnabled,selectDisabled
andresetthesetting.
Intel(R)Virtualization
Technology
•Disabled
•Enabled
IfyouselectEnabled,aVirtual
MachineMonitor(VMM)canutilize
theadditionalhardwarecapabilities
providedbyIntelVirtualization
Technology.
Virtualization
Intel(R)VT-dFeature
•Disabled
•Enabled
IntelVT-dstandsforIntel
VirtualizationTechnologyfor
directedI/O.Whenenabled,aVMM
canutilizetheplatforminfrastructure
forI/Ovirtualization.
Note:Thisitemisavailablewhen
theprocessorofyourcomputer
supportsthisfeature.
70UserGuide