Lenovo ThinkPad X1 Carbon (English) User Guide - Page 90

Menu item, Selection, Comments, Memory Protection, Enabled, Disabled, Virtualization

Page 90 highlights

Table 6. Security menu items (continued) Menu item Submenu item Memory Protection Execution Prevention Selection • Disabled • Enabled Virtualization Intel Virtualization Technology • Disabled • Enabled Intel VT-d Feature • Disabled • Enabled Anti-Theft Intel AT Module Activation • Disabled • Enabled • Permanently Disabled Intel AT Suspend • Enter Comments Some computer viruses and worms cause memory buffers to overflow by running code where only data is allowed. If the Data Execution Prevention feature can be used with your operating system, then by selecting Enabled you can protect your computer against attacks by such viruses and worms. If after choosing Enabled you find that an application program does not run correctly, select Disabled and reset the setting. If you select Enabled, a Virtual Machine Monitor (VMM) can utilize the additional hardware capabilities provided by Virtualization Technology. Intel VT-d is Intel Virtualization Technology for Directed I/O. When enabled, a VMM can utilize the platform infrastructure for I/O virtualization. Note: This submenu is not supported in models with an AMD CPU. Enable or disable the UEFI BIOS interface to activate the Intel AT module, which is an optional Anti-Theft service from Intel. Note: If you set the Intel AT module activation to Permanently Disabled, you will be unable to enable this setting again. This option is displayed only when the anti-theft function is activated. The Intel anti-theft suspend screen will be displayed at next boot to enter the suspend mode. 76 User Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134

Table 6. Security menu items (continued)
Menu item
Submenu item
Selection
Comments
Memory Protection
Execution Prevention
Disabled
Enabled
Some computer viruses
and worms cause memory
buffers to overflow by
running code where only
data is allowed.
If the
Data Execution Prevention
feature can be used with
your operating system, then
by selecting
Enabled
you
can protect your computer
against attacks by such
viruses and worms. If after
choosing
Enabled
you find
that an application program
does not run correctly,
select
Disabled
and reset
the setting.
Intel Virtualization
Technology
Disabled
Enabled
If you select
Enabled
,a
Virtual Machine Monitor
(VMM) can utilize the
additional hardware
capabilities provided by
Virtualization Technology.
Virtualization
Intel VT-d Feature
Disabled
Enabled
Intel VT-d is Intel
Virtualization Technology
for Directed I/O. When
enabled, a VMM can utilize
the platform infrastructure
for I/O virtualization.
Note:
This submenu is not
supported in models with
an AMD CPU.
Intel AT Module Activation
Disabled
Enabled
Permanently Disabled
Enable or disable the UEFI
BIOS interface to activate
the Intel AT module, which
is an optional Anti-Theft
service from Intel.
Note:
If you set the Intel
AT module activation to
Permanently Disabled
,
you will be unable to enable
this setting again.
Intel AT Suspend
Enter
This option is displayed
only when the anti-theft
function is activated.
The Intel anti-theft suspend
screen will be displayed
at next boot to enter the
suspend mode.
Anti-Theft
76
User Guide