Option Description
NOTE: Disabling this option will block BIOS updates from services such as Microsoft Windows Update
and Linux Vendor Firmware Service (LVFS).
TPM 2.0 Security Allows you to enable the Trusted Platform Module (TPM) during POST.
You can control whether the trusted platform module is visible to the operating system. The option is:
• TPM on This option is selected by default.
• Clear
• PPI Bypass for Enable Commands This option is selected by default.
• Attestation Enable. This option is selected by default.
• PPI Bypass for Disable Commands
• Key Storage Enable. This option is selected by default.
• SHA-256. This option is selected by default.
CAUTION: For the TPM upgrade/downgrade process, it is recommended to complete the process in an
AC power with AC adapter plugged into the computer. The upgrade/downgrade process without the AC
adapter plugged in might damage the computer or hard disk.
NOTE: Disabling this option does not change any settings you have made to the TPM, nor does it delete
or change any information or keys you may have stored in the TPM. Changes to this setting take eect
immediately.
Computrace (R) Allows you to activate or disable the optional Computrace Service from Absolute software. The options are:
• Deactivate
• Disable
• Activate
NOTE: The Activate and Disable options will permanently activate or disable the feature and no further
changes will be allowed
Default setting: Activate
OROM Keyboard
Access
Allows you to set an option to enter the Option ROM Conguration screens using hotkeys during boot. The options
are:
• Enabled. This option is selected by default.
• One Time Enable
• Disabled
Default setting: Enable
Admin Setup
Lockout
Allows you to prevent users from entering the setup when an Administrator password is set.
Enable Admin Setup Lockout This option is not selected by default.
Master Password
Lockout
Allows you to prevent users from entering the setup when an Master password is set. Hard disk passwords need to
be cleared before the setting can be changed.
Enable Master Password Lockout This option is not selected by default.
SSM Security
Mitigation
Allows you to enable or disable additional UEFI SMM Security Mitigation protections. The OS can use the feature
to help protect the secure environment created by virtualization based security.
SSM Security Mitigation This option is disabled by default.
System setup 65
To Next Page
Loading...
