Lenovo ThinkPad X1 Carbon, User Manual, Page: 116 / 167

Table 8. Security menu items (continued)
Menu item Submenu item Value Comments
Flash BIOS Update by
End-Users • Disabled
• Enabled
If you select Enabled , all users can update
the UEFI BIOS. If you select Disabled ,
only the person who knows the supervisor
password can update the UEFI BIOS.
UEFI BIOS Update
Option
Secure RollBack
Prevention • Disabled (If
OS Optimized
Defaults
is set as
disabled.)
• Enabled (If
OS Optimized
Defaults
is as
enabled.)
If you select Disabled , you can flash the older
version UEFI BIOS.
Security Chip
Selection • Discrete TPM
• Intel PPT
If you select Discrete TPM , you can use a
discrete TPM chip with TPM 1.2 mode. If you
select
Intel PTT , you can use Intel Platform
Trusted technology (PTT) with TPM 2.0 mode.
Note:
Intel PTT can be used with Windows 8.1 or
later operating system.
Security Chip • Active
• Inactive
• Disabled
If you select Active , the security chip is
functional. If you select Inactive , the Security
Chip option is visible, but the security chip
is not functional. If you select Disabled ,
the Security Chip option is hidden and the
security chip is not functional.
Security Reporting
Options This option is available when Security Chip
is active. It is used to enable or disable the
following Security Reporting Options:
• BIOS ROM String Reporting (Windows 7)
or UEFI ROM String Reporting (Windows
8.1): BIOS text string
• CMOS Reporting : CMOS data
• NVRAM Reporting : Security data stored
in the Asset ID
• SMBIOS Reporting : SMBIOS data
Clear Security Chip • Enter Clear the encryption key.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
Intel TXT Feature • Disabled
• Enabled
Enable or disable the Intel Trusted Execution
Technology.
Note: This item is displayed only if you have
selected Active for the Security Chip option.
Physical Presence for
Provisioning • Disabled
• Enabled
Enable or disable the confirmation message
when you change the settings of the security
chip.
Security Chip
Physical Presence for
Clear • Disabled
• Enabled
Enable or disable the confirmation message
when you clear the security chip.
100
User Guide