Table 28. System setup options—Security menu(continued)
Security
WARNING: The 'Permanently Disabled' option
can only be selected once. When 'Permanently
Disabled' is selected, Absolute Persistence cannot
be re-enabled. No further changes to the Enable/
Disable states are allowed.
NOTE: The Enable/Disable options are unavailable while
the computer is in the activated state.
NOTE: When the Absolute features are activated, the
Absolute integration cannot be disabled from the BIOS
setup screen.
Absolute Status Displays Absolute status.
Windows SMM Security Mitigations Table (WSMT) Enables or disables additional UEFI SMM Security Mitigation
protections. This option uses the Windows SMM Security
Mitigations Table (WSMT) to confirm to the operating
system that security best practices have been implemented
by the UEFI firmware.
By default, the SMM Security Mitigation option is
enabled.
For additional security, Dell Technologies recommends
keeping the SMM Security Mitigation option enabled
unless you have a specific application which is not
compatible.
NOTE: This feature may cause compatibility issues
or loss of functionality with some legacy tools and
applications.
Trusted Platform Module (TPM) Trusted Platform Module (TPM) is a security device
that stores computer-generated keys for encryption and
features such as BitLocker, Virtual Secure Mode, remote
Attestation.
By default, the Trusted Platform Module (TPM) option is
enabled.
For additional security, Dell Technologies recommends
keeping Trusted Platform Module (TPM) enabled to allow
these security technologies to fully function.
PPI Bypass for Clear Command Allows you to control the TPM Physical Presence Interface
(PPI). When enabled, this setting will allow the OS to skip
BIOS PPI user prompts when issuing the Clear command.
Changes to this setting take effect immediately.
By default, the PPI Bypass for Clear Command option is
disabled.
For additional security, Dell Technologies recommends
keeping the PPI Bypass for Clear Commands option
disabled.
Enable Pre-Boot DMA Support Allows you to control the Pre-Boot DMA protection for both
internal and external ports. This option does not directly
enable DMA protection in the operating system.
NOTE: This option is not available when the
virtualization setting for IOMMU is disabled (VT-d/AMD
Vi).
BIOS setup 95
To Next Page
Loading...
