Item Default value
UEFI Capsule Firmware Updates — Enable UEFI Capsule
Firmware Updates [Enable/Disable]
Enabled
TPM 1.2 Security
TPM 1.2 Security [Enable/Disable] Enabled
TPM On Enabled
PPI Bypass for Enable Commands Disabled
PPI Bypass for Disable Commands Disabled
Clear [Enable/Disable] Disabled
TPM 2.0 Security
TPM 2.0 Security [Enable/Disable] Enabled
TPM On Enabled
PPI Bypass for Enable Commands Disabled
PPI Bypass for Disable Commands Disabled
Attestation Enable [Enable/Disable] Enabled
Key Storage Enable [Enable/Disable] Enabled
SHA-256 Enabled
Clear [Enable/Disable] Not applicable
Computrace(R) — [Deactivate/Disable/Enable] Deactivate
Chassis Intrusion — [Disable/Enable/On-Silent] Disable
CPU XD Support — [Enable/Disable] Enabled
OROM Keyboard Access — [Enable/One Time Enable/
Disable]
Enabled
Admin Setup Lockout — [Enable/Disable] Disabled
Secure boot
Item Default value
Secure Boot Enable — [Enable/Disable] Disabled
Expert Key Management
Enable Custom Mode [Enable/Disable] Disabled
Custom Mode Key Management {PK/KEK/db/dbx} Platform Specific
Intel software guard extensions
Item Default value
Intel SGX Enable — [Enable/Disable] Disabled
Enclave Memory Size — [32MB/64MB/128MB] 128 MB
49