Dell EMC PowerEdge R7425 - Page 55

Option Description
Table 39. TPM 1.2 security information
TPM Information Changes the operational state of the TPM. This option
is se
t to No Change by default.
TPM Firmware Indicates the rm
ware version of the TPM.
TPM Status Species the TPM st
atus.
TPM Command Controls the Trusted Platform Module (TPM). When
se
t to None, no command is sent to the TPM. When
set to Activate, the TPM is enabled and activated.
When set to Deactivate, the TPM is disabled and
deactivated. When set to Clear, all the contents of the
TPM are cleared. This option is set to None by default.
When TPM 2.0 is installed, the TPM Security option is set to On or O. This option is set to O by default.
Table 40. TPM 2.0 security information
TPM Information Changes the operational state of the TPM. This option
is se
t to No Change by default.
TPM Firmware Indicates the rm
ware version of the TPM.
TPM Hierarcy Enable, disable, or clear the storage and endorsement
hier
archies. When set to Enabled, the storage and
endorsement hierarchies can be used.
When set to Disabled, the storage and endorsement
hierarchies cannot be used.
When set to
Clear, the storage and endorsement
hierarchies are cleared of any values, and then reset to
Enabled.
Power Button Enables or disables the power button on the front of the system. This option is set to Enabled by default.
AC Power Recovery Sets how the system behaves after AC power is restored to the system. This option is set to Last by default.
AC Power Recovery
Dela
y
Sets the time delay for the system to power up after AC power is restored to the system. This option is set to
Immediate by default.
User De
ned Delay
(60 s to 240 s)
Sets the
User Dened Delay option when the User Dened option for AC Power Recovery Delay is selected.
UEFI Variable
A
ccess
Provides varying degrees of securing UEFI variables. When set to Standard (the default), UEFI variables are
accessible in the oper
ating system per the UEFI specication. When set to Controlled, selected UEFI variables are
protected in the environment and new UEFI boot entries are forced to be at the end of the current boot order.
Secure Boot Enables Secure Boot, where the BIOS authenticates each pre-boot image by using the certica
tes in the Secure
Boot Policy. Secure Boot is set to Disabled by default.
Secure Boot Policy When Secure Boot policy is set to Standard, the BIOS uses the system manufacturer’s key and certica
tes to
authenticate pre-boot images. When Secure Boot policy is set to Custom, the BIOS uses the user-dened key and
certicates. Secure Boot policy is set to Standard by default.
Secure Boot Mode Congures ho
w the BIOS uses the Secure Boot Policy Objects (PK, KEK, db, dbx).
If the current mode is set to Deployed Mode, the available options are User Mode and Deployed Mode. If the
current mode is set to User Mode, the available options are User Mode, Audit Mode, and Deployed Mode.
Pre-operating system management applications 55