Table 6. System setup options—Security menu (continued)
Security
Default: Not Set
HDD Password Displays if the HDD password is clear or set.
Default: Not Set
Password Change Allows you to permit or deny system password or HDD
password changes.
Default: Permitted
SED Block SID Authentication Enables or disables SED Block SID Authentication.
Default: Disabled
PPI Bypass for SED Block SID Command When there is no drive ownership and this option is enabled,
BIOS requires user input while sending the Block SID
authentication command to SED drives. When this option
is disabled, BIOS does not require user input while sending
the Block SID command.
Default: Disabled
Windows SMM Security Mitigations Table (WSMT) Enables or disables the Windows SMM Security Mitigations
Table. It allows the system firmware to confirm to the OS
that certain security best practices have been implemented
in the System Management Mode (SMM) software.
Default: Disabled
Firmware TPM Enable or disable the firmware TPM.
Default: Enabled
PPI Bypass for Clear Command Allows you to control the TPM Physical Presence Interface
(PPI). When enabled, this setting will allow the OS to skip
BIOS PPI user prompts when issuing the Clear command.
Changes to this setting take effect immediately.
Default: Disabled
Enable Pre-Boot DMA Support Enables or disables pre-boot DMA protection for both
internal and external ports.
Default: Enabled
Enable OS Kernel DMA Support Enables or disables Kernel DMA protection for both internal
and external ports.
Default: Enabled
Secure Boot
System Status:
Secure Boot Database Default: Installed and Locked
Secure Boot Mode
Default: Enabled
User Customized Security Options
Default: No
Secure Boot Enables secure boot using only validated boot software.
Default: Enabled
Select Secure Mode Allows you to modify the behavior of Secure Boot to allow
evaluation or enforcement of UEFI driver signatures.
Default: Deployed Mode
74 System setup
To Next Page
Loading...
