Option Description
• TPM On (default)
• Clear
• PPI Bypass for Enable Commands
• PPI Bypass for Disable Commands
• PPI Bypass for Clear Commands
• Attestation Enable (default)
• Key Storage Enable (default)
• SHA-256 (default)
Choose any one option:
• Disabled
• Enabled (default)
Absolute This eld lets you Enable, Disable or Permanently Disable the BIOS module interface of the optional
Absolute Persistence Module service from Absolute Software.
• Enabled (default)
• Disabled
• Permanently Disabled
Chassis Intrusion This eld controls the chassis intrusion feature.
Choose any one of the option:
• Disabled (default)
• Enabled
• On-Silent
OROM Keyboard Access
• Disabled
• Enabled (default)
• One Time Enable
Admin Setup Lockout Allows you to prevent users from entering Setup when Admin password is set. This option is not set
by default.
SMM Security Mitigation Allows you to enable or disable additional UEFI SMM Security Mitigation protections. This option is
not set by default.
Secure boot options
Table 24. Secure Boot
Option Description
Secure Boot Enable Allows you to enable or disable Secure Boot feature
• Secure Boot Enable
This option is not selected by default.
Secure Boot Mode Allows you to modify the behavior of Secure Boot to allow evaluation or enforcement of UEFI
driver signatures.
• Deployed Mode (default)
24 System setup