Lenovo ThinkPad Tablet 2 User Manual page 54

Table 2. Security menu items (continued)
Menu item Submenu item
Physical Presence for
Provisioning
Physical Presence for
Clear
UEFI BIOS Secure RollBack
Update Option Prevention
I/O Port Access Wireless LAN
Wireless WAN
Bluetooth
USB Port
Memory Card Slot
Integrated Camera
NFC
Secure Boot Secure Boot
Platform Mode
Secure Boot Mode
Reset to Setup Mode
Restore Factory keys
46
User Guide
Value Comments
• Disabled This option enables or disables the confirmation
message when you change the settings of the
• Enabled
security chip.
Note: This option appears only if the system
uses TPM 2.0 chip.
• Disabled This option enables or disables the confirmation
message when you clear the security chip.
• Enabled
Note: This option appears only if the system
uses TPM 2.0 chip.
• Disabled If you select Disabled, you can flash to the
previous version of UEFI BIOS. If you select
• Enabled
Enabled, you can not flash to the previous
version of UEFI BIOS.
• Disabled If you select Enabled, you can use the Wireless
LAN device.
• Enabled
• Disabled If you select Enabled, you can use the Wireless
WAN device.
• Enabled
• Disabled If you select Enabled, you can use Bluetooth
devices.
• Enabled
• Disabled
If you select Enabled, you can use USB
connectors.
• Enabled
• Disabled If you select Enabled, you can use the memory
card slots.
• Enabled
• Disabled
If you select Enabled, you can use the integrated
camera.
• Enabled
• Disabled
If you select Enabled, you can use the NFC.
• Enabled
• Disabled Enable or disable UEFI Secure Boot feature.
Windows 8 and Windows 8.1 operating systems
• Enabled
require this feature to be enabled.
• User Mode Specify the system operating mode.
• Setup Mode
• Standard Mode Indicates Secure Boot mode is standard mode
or custom mode.
• Custom Mode
• Enter This option is used to clear the current platform
key and put the system into setup mode. You can
install your own platform key and customize the
Secure Boot signature databases in setup mode.
Secure Boot mode will be set to custom mode.
• Enter This option is used to restore all keys and
certificates in Secure Boot databases to factory
defaults. Any customized Secure Boot settings
will be erased, and the default platform key will
be re-established along with the original signature
databases including certificate for Windows 8
and Windows 8.1 operating systems.