Table 32. System setup options—Security menu(continued)
Security
Default: On
PPI Bypass for Enable Commands Controls the TPM Physical Presence Interface(PPI). When
enabled, this setting allows the OS to skip BIOS PPI
user prompts when issuing TPM PPI enable and activate
commands.
Default: Disabled
PPI Bypass for Disable Commands Controls the TPM Physical Presence Interface(PPI). When
enabled, this setting will allow the OS to skip BIOS PPI
user prompts when issuing TPM PPI disable and deactivate
commands(#2, 4, 7, 9, & 11).
Default: Disabled
Attestation Enable Allws the user to control whether the TPM Endorsement
Hierarchy is available to the OS.
Default: Enabled
Key Storage Enable Allows the user to control whether TPM Storage Hierarchy
is available to the operating system.
Default: Enabled
SHA-256 Enables the BIOS and the TPM to use the SHA-256 hash
algorithm to extend measurements into the TPM PCRs
during BIOS boot.
Default: Enabled
Clear Clears the TPM owner information, and returns the TPM to
the default state.
Default: Disabled
PPI Bypass for Clear Commands Controls the TPM Physical Presence Interface(PPI). When
enabled, this setting will allow the OS to skip BIOS PPI user
prompts when issuing the Clear command.
Default: Disabled
TPM State Displays the state of the TPM Module on the computer.
Default: Enabled
Enable Pre-Boot DMA support Enable or disable the pre-boot DMA support.
Default: Enabled
Enable OS kernel DMA support Enable or disable the OS kernel DMA support.
Default: Enabled
Secure Boot
System Status:
Secure Boot Database A security standard that ensures the device boots using
only software that is trusted by the Original Equipment
Manufacturer (OEM)
Default: Installed and Locked
Secure Boot Status Ensure that only trusted software can be executed on the
system.
Default: Disabled
BIOS Setup 95
To Next Page
Loading...
