User's Guide

Table Of Contents
Descriptions:Setapower-onpasswordtoprotectthecomputerfromunauthorizedaccess.Formore
information,see“Passwordsintroduction”onpage41
.
HardDiskxPassword
Values:Disabled,Enabled
Descriptions:Setaharddiskpasswordtopreventunauthorizedusersfromaccessingdataontheinternal
storagedrive.Formoreinformation,see“Passwordsintroduction”onpage41
.
SecurityChip
SecurityChipType
Value(fordiscreteTPMchip):TPM2.0
Value(fornondiscreteTPMchip):IntelPTT(formodelswithIntelCPU),AMDfTPM(formodelswith
AMDCPU)
SecurityChip
Values:Enabled,Disabled
Descriptions:Enableordisablethesecuritychip.
ClearSecurityChip
Descriptions:Usethisoptiontocleartheencryptionkey.
PhysicalPresenceforClear
Values:Disabled,Enabled
Descriptions:Ifthisoptionisenabled,aconfirmationmessageisdisplayedwhenyouclearthesecurity
chip.
UEFIBIOSUpdateOption
FlashBIOSUpdatingbyEnd-Users
Values:Disabled,Enabled
Descriptions:Whenthisoptionisenabled,alluserscanupdatetheUEFIBIOS.Ifyoudisablethisoption,
onlythepersonwhoknowsthesupervisorpasswordcanupdatetheUEFIBIOS.
SecureRollBackPrevention
Values:Disabled,Enabled
Descriptions:Whenthisoptionisdisabled,youcanflashtheUEFIBIOStoearlierversion.
Note:ThisitemissetasDisabledbydefaultwhentheOSOptimizedDefaultsontheRestartmenuisset
asDisabled.ThisitemissetasEnabledbydefaultwhentheOSOptimizedDefaultsissetasEnabled.
MemoryProtection
ExecutionPrevention
Values:Disabled,Enabled
Descriptions:Somecomputervirusesandwormscausememorybufferstooverflow.Byenablingthis
option,youcanprotectyourcomputeragainstattacksfromsuchvirusesandworms.Iftheoptionis
enabledbutyoufindthataprogramdoesnotrunproperly,disablethisoptionfirstandthenresetthe
settings.
Virtualization
IntelVirtualizationTechnology
Values:Disabled,Enabled
Chapter6.Advancedconfiguration55