ThinkPad Helix 20CG, User Manual

Page: 87 / 120

Table 2. Security menu items (continued)
Menu item Submenu item Value Comments
Secure Boot • On
• Off
Enable or disable UEFI
Secure Boot feature.
Platform Mode • User Mode
• Setup Mode
Specify the system
operating mode.
Secure Boot Mode • Standard Mode
• Custom Mode
Indicates Secure Boot
mode is standard mode or
custom mode.
Reset to Setup Mode
• Enter This option is used to
clear the current platform
key and put the system
into setup mode. You can
install your own platform
key and customize the
Secure Boot signature
databases in setup mode.
Secure Boot mode will be
set to custom mode.
Secure Boot
Restore Factory Keys • Enter This option is used to
restore all keys and
certificates in Secure
Boot databases to factory
defaults. Any customized
Secure Boot settings
will be erased, and the
default platform key will
be re-established along
with the original signature
databases including
certificate for Windows 8.1
operating system.
Flash BIOS Updating by
End-Users
• Disabled
• Enabled
If you select Enabled ,
all users can update the
UEFI BIOS. If you select
Disabled , only the person
who knows the supervisor
password can update the
UEFI BIOS.
UEFI BIOS Update
Option
Secure RollBack Prevention • On
• Off
If you select Off , you
can flash to the previous
version of UEFI BIOS. If
you select
On , you can
not flash to the previous
version of UEFI BIOS.
Chapter 7
.
Advanced configuration
79