Lenovo 3444CUU Laptop User Manual


 
Table 5. Security menu items (continued)
Submenu item Selection Comments
Security Chip
Active
Inactive
Disabled
If you select “Active,” Security Chip
is functional. If you select “Inactive,”
Security Chip is visible, but is not
functional. If you select “Disabled,”
Security Chip is hidden and is not
functional.
Security Reporting Options
Enable or disable the following
Security Reporting Options.
BIOS ROM String Reporting: BIOS
text string
ESCD Reporting: Extended
system conguration data
CMOS Reporting: CMOS data
NVRAM Reporting: Security data
stored in the Asset ID
SMBIOS Reporting: SMBIOS data
Clear Security Chip
Enter
Clear the encryption key.
Note: Only if you select “Active” for
Security Chip, this item appears.
Intel
®
TXT Feature Disabled
Enabled
Enable or disable Intel Trusted
Execution Technology.
UEFI BIOS Update Option
Flash BIOS Updating by End-Users
Disabled
Enabled
If you select “Enabled,” all users
can update the UEFI BIOS. If you
select “Disabled,” only the person
who knows supervisor password can
update the UEFI BIOS.
Flash Over LAN
Disabled
Enabled
Enable your computer's UEFI BIOS to
be updated (ashed) over an active
network connection.
Memory Protection
Execution Prevention Disabled
Enabled
Some computer viruses and worms
cause memory buffers to overow
by running code where only data
is allowed. If the Data Execution
Prevention feature can be used
with your operating system, then by
selecting “Enabled” you can protect
your computer against attacks by
such viruses and worms. If after
choosing “Enabled” you nd that an
application program does not run
correctly, select “Disabled” and reset
the setting.
Virtualization
Chapter 8. Advanced conguration 111