Lenovo ThinkPad X1 Extreme, User Manual

Page: 64 / 140

Description: Enable this option to use password authentication when fingerprints are not available. This
item is displayed if
Security Mode is set to High .
• Reset Fingerprint Data
Value: Enter
Description: Use this option to erase all fingerprint data stored in the fingerprint reader and reset the
settings to the factory default state. As a result, any power-on security features previously enabled will not
work until they are re-enabled in the fingerprint software.
Security Chip
• Security Chip Type
Values: TPM 2.0
Description: You can use a discrete TPM chip with TPM 2.0 mode.
• Security Chip (for TPM 2.0)
Values: Enabled , Disabled
Description: Enable or disable the security chip.
• Security Reporting Options
– SMBIOS Reporting
Values: Enabled , Disabled
Description: When enabled, changes to corresponding UEFI BIOS data are logged in a location, (PCR1,
defined in the TCG standards), which other authorized programs can monitor, read and analyze.
• Clear Security Chip
Description: Use this option to clear the encryption key. It will not be possible to access already-encrypted
data after these keys are cleared.
• Intel (R) TXT Feature
Values: Disabled , Enabled
Description: Enable or disable the Intel Trusted Execution Technology.
• Physical Presence for Clear
Values: Disabled, Enabled
Description: If this option is enabled, a confirmation message is displayed when you clear the security
chip.
Note: This option may be bypassed by Windows 10 version 1709 or later operating systems.
UEFI BIOS Update Option
• Flash BIOS Updating by End-Users
Values: Disabled, Enabled
Description: When this option is enabled, all users can update the UEFI BIOS. If you disable this option,
only the person who knows the supervisor password can update the UEFI BIOS.
• Secure RollBack Prevention
Values: Disabled , Enabled
Description: When this option is disabled, you can flash the UEFI BIOS to earlier version.
Note: This item is set as Disabled by default when the OS Optimized Defaults on the Restart menu is
set as Disabled . This item is set as Enabled by default when the OS Optimized Defaults is set as
Enabled .
60
P1/X1 Extreme User Guide