Table 30. System setup options - Security menu(continued)
Security
For additional security, Dell Technologies recommends
keeping the PPI Bypass for Disable Commands option
disabled.
Attestation Enable The Attestation Enable option controls the endorsement
hierarchy of TPM. Disabling the Attestation Enable option
prevents TPM from being used to digitally sign certificates.
By default, the Attestation Enable option is enabled.
For additional security, Dell Technologies recommends
keeping the
Attestation Enable option enabled.
NOTE: When disabled, this feature may cause
compatibility issues or loss of functionality in some
operating systems.
Key Storage Enable The Key Storage Enable option controls the storage
hierarchy of TPM, which is used to store digital keys.
Disabling the Key Storage Enable option restricts the
ability of TPM to store owner's data.
By default, the Key Storage Enable option is enabled.
For additional security, Dell Technologies recommends
keeping the Key Storage Enable option enabled.
NOTE: When disabled, this feature may cause
compatibility issues or loss of functionality in some
operating systems.
SHA-256 Allows the user to control the hashing algorithm that
is used by the TPM. When enabled, the TPM uses the
SHA-256 hashing algorithm. When disabled, the TPM uses
the SHA-1 hash algorithm.
By default, the SHA-256 option is enabled.
For additional security, Dell Technologies recommends
keeping the SHA-256 option enabled.
Clear When enabled, the Clear option clears information that is
stored in the TPM after exiting the computer's BIOS. This
option returns to the disabled state when the computer
restarts.
By default, the Clear option is disabled.
Dell Technologies recommends enabling the Clear option
only when TPM data is required to be cleared.
TPM State Enables or disables the Trusted Platform Module (TPM).
This is the normal operating state for the Trusted Platform
Module (TPM) when you want to use its complete array of
capabilities.
By default, the TPM State option is enabled.
Enable Pre-Boot DMA Support Allows the user to control the Pre-Boot DMA protection
for both internal and external ports. This option does not
directly enable DMA protection in the operating system.
NOTE: This option is not available when the
virtualization setting for IOMMU is disabled (VT-d/AMD
Vi).
By default, the Enable Pre-Boot DMA Support option is
enabled.
128 BIOS Setup
To Next Page
Loading...
