Operation Manual

Table6.Securitymenuitems(continued)
Menuitem
Submenuitem
Value
Comments
Password
Authentication
•Disabled
•Enabled
Enableordisablepasswordauthentication.
Ifhighsecuritymodeisselected,thisitemis
displayed.
ResetFingerprintData•Enter
Thisoptionisusedtoeraseallngerprintdata
storedinthengerprintreaderandresetsettings
tothefactorystate.Asaresult,anypower-on
securityfeaturespreviouslyenabledwillnotbe
abletoworkuntiltheyarere-enabledinthe
ngerprintsoftware.
SecurityChip
•Active
•Inactive
•Disabled
IfyouselectActive,thesecuritychipisfunctional.
IfyouselectInactive,theSecurityChipoption
isvisible,butthesecuritychipisnotfunctional.If
youselectDisabled,theSecurityChipoptionis
hiddenandthesecuritychipisnotfunctional.
SecurityReporting
Options
EnableordisablethefollowingSecurityReporting
Options:
•BIOSROMStringReporting:BIOStextstring
•ESCDReporting:Extendedsystem
congurationdata
•CMOSReporting:CMOSdata
•NVRAMReporting:Securitydatastoredin
theAssetID
•SMBIOSReporting:SMBIOSdata
ClearSecurityChip
•Enter
Cleartheencryptionkey.
Note:Thisitemisdisplayedonlyifyouhave
selectedActivefortheSecurityChipoption.
IntelTXTFeature•Disabled
•Enabled
EnableordisableIntelTrustedExecution
Technology.
PhysicalPresencefor
Provisioning
•Disabled
•Enabled
Thisoptionenablesordisablestheconrmation
messagewhenyouchangethesettingsofthe
securitychip.
SecurityChip
PhysicalPresencefor
Clear
•Disabled
•Enabled
Thisoptionenablesordisablestheconrmation
messagewhenyouclearthesecuritychip.
FlashUEFIUpdatingby
End-Users
•Disabled
•Enabled
IfyouselectEnabled,alluserscanupdatethe
UEFIBIOS.IfyouselectDisabled,onlythe
personwhoknowsthesupervisorpasswordcan
updatetheUEFIBIOS.
UEFIBIOS
UpdateOption
SecureRollBack
Prevention
•Disabled
•Enabled
IfyouselectDisabled,end-usercanashthe
olderversionUEFIBIOS.IfyouselectEnabled,
end-usercannotashtheolderversionUEFI
BIOS.
Memory
Protection
ExecutionPrevention•Disabled
•Enabled
Somecomputervirusesandwormscause
memorybufferstooverow.Byselecting
Enabledyoucanprotectyourcomputeragainst
attacksbysuchvirusesandworms.Ifafter
choosingEnabledyoundthatanapplication
programdoesnotruncorrectly,selectDisabled
andresetthesetting.
Chapter8.Advancedconguration117