Table 6. System setup options—Security menu (continued)
Security
Default: Not Set
System Password Status Displays whether the system password is set.
Default: Not Set
Service Tag Creates a system Service Tag that can be used by an IT
administrator to uniquely identify a particular system. Once
set in BIOS, the Service Tag cannot be changed.
Admin Password Enables the user to set, change, or delete the admin
password.
System Password Enables the user to set, change, or delete the system
password.
Password Change Allows you to enable or disable password change on the
computer.
Default: Permitted
Absolute Enable or disable the BIOS module interface of the optional
Absolute Persistence Module service from Absolute
Software.
Default: Enabled
Absolute Status Enables you to activate or deactivate the Absolute
Persistence Module service.
Default: Deactivate
Firmware TPM Displays the firmware TPM state.
Default: Enabled
PPI Bypass for Clear Command Enable or disable the TPM Physical Presence Interface
(PPI). When enabled, this setting will allow the OS to skip
BIOS PPI user prompts when issuing the Clear command.
Changes to this setting take effect immediately.
Default: Disabled
UEFI Firmware Capsule Updates Enables or disables BIOS updates through UEFI capsule
update packages.
Default: Enabled
Windows SMM Security Mitigations Table (WSMT) Enables or disables Windows SMM Security Mitigation
protections.
Default: Disabled
Enable Pre-Boot DMA Protection Enables or disables Pre-Boot DMA Protection.
Default: Enabled
Enable OS Kernel DMA Support Enables or disables OS Kernel DMA Support.
Default: Enabled
Secure Boot
Secure Boot Enables secure boot using only validated boot software.
Default: Disabled
Secure Boot Mode Modifies the behavior of Secure Boot to allow evaluation
or enforcement of UEFI driver signatures. Deployed Mode
should be selected for normal operation of Secure Boot.
System setup 69
To Next Page