Table 10. System setup optionsāSecurity menu (continued)
Security
Default: ON
SHA-256 Enables or disables the BIOS and the TPM to use the SHA-256 hash algorithm
to extend measurements into the TPM PCRs during BIOS boot.
Default: ON
Clear Enables or disables the computer to clear the PTT owner information, and
returns the PTT to the default state.
Default: OFF
TPM State Enables or disables the TPM. This is the normal operating state for the TPM
when you want to use its complete array of capabilities.
Default: Enabled
SMM Security Mitigation Enables or disables additional UEFI SMM Security Mitigation protections.
Default: OFF
NOTE: This feature may cause compatibility issues or loss of functionality
with some legacy tools and applications.
Intel SGX Enables or disables the Intel Software Guard Extensions (SGX) to provide a
secured environment for running code/storing sensitive information.
Default: Software Control
Table 11. System setup optionsāPasswords menu
Passwords
Admin Password Enables the user to set, change, or delete the administrator (admin) password.
The admin password enables several security features
System Password Enables the user to set, change, or delete the system password.
Password Configuration
Upper Case Letter Enforces password restriction that the password must contain at least one
upper case letter.
Default: OFF
Lower Case Letter Enforces password restriction that the password must contain at least one
lower case letter.
Default: OFF
Digit Enforces password restriction that the password must contain at least one
digit.
Default: OFF
Special Character Enforces password restriction that the password must contain at least one
special character.
Default: OFF
Minimum Characters Controls the minimum number of characters allowed for password.
Default: 04
Password Bypass Bypass the System (Boot) Password and the internal hard drive password
prompts during a system restart.
Default: Disabled
Password Changes
System setup 61