Dell Latitude 7200 2-in-1 - Secure Boot; Intel Software Guard Extensions

Option Description
OROM Keyboard
Access
Allows you to set an option to enter the Option ROM Conguration screens using hotkeys during boot. The options
are:
• Enabled. This option is selected by default.
• One Time Enable
• Disabled
Default setting: Enable
Admin Setup
Lockout
Allows you to prevent users from entering the setup when an Administrator password is set.
Enable Admin Setup Lockout This option is not selected by default.
Master Password
Lockout
Allows you to prevent users from entering the setup when an Master password is set. Hard disk passwords need to
be cleared before the setting can be changed.
Enable Master Password Lockout This option is not selected by default.
SSM Security
Mitigation
Allows you to enable or disable additional UEFI SMM Security Mitigation protections. The OS can use the feature
to help protect the secure environment created by virtualization based security.
SSM Security Mitigation This option is disabled by default.
Secure Boot
Option
Description
Secure Boot Enable This option enables or disables the Secure Boot feature.
• Disabled
• Enabled
Default setting: Enabled.
Expert Key
Management
Allows you to manipulate the security key databases only if the system is in Custom Mode. The Enable Custom
Mode option is disabled by default.
Custom Mode Key
Management
Allows you to manage the security key databases only if the system is in Custom Mode .The options are:
• PK. This option is selected by default.
• KEK
• db
• dbx
NOTE: If you disable the Enable Custom Mode, all the changes made will be erased and the keys will
restore to default settings. Save to File will save the key to a user-selected le.
Intel software Guard Extensions
Option
Description
Intel SGX Enable This option enables or disables to provide a secured environment for running code/storing sensitive information in
the context of the main OS. The options are:
84 System setup