Table 33. System setup options—Security menu(continued)
Security
By default, the ON option is enabled.
Key Storage Enable Enables to control whether the Trusted Platform Module (TPM) Storage
Hierarchy is available to the operating system.
By default, the ON option is enabled.
SHA-256 BIOS and the TPM will use the SHA-256 hash algorithm to extend
measurements into the TPM PCRs during BIOS boot.
By default, the ON option is enabled.
Clear Enables to clear the TPM owner information and returns the TPM to the
default state.
By default, the OFF option is enabled.
PPI ByPass for Clear Commands Controls the TPM Physical Presence Interface (PPI).
By default, the OFF option is enabled.
Chassis intrusion Controls the chassis intrusion feature.
By default, the Disabled option is enabled.
SMM Security Mitigation Enables or disables additional UEFI SMM Security Mitigation protections. This
option uses the Windows SMM Security Mitigations Table (WSMT) to confirm
to the operating system that security best practices have been implemented
by the UEFI firmware.
By default, the ON option is enabled.
For additional security, Dell Technologies recommends keeping the SMM
Security Mitigation option enabled unless you have a specific application
which is not compatible.
NOTE: This feature may cause compatibility issues or loss of functionality
with some legacy tools and applications.
Data Wipe on Next Boot
Start Data Wipe Data Wipe is a secure wipe operation that deletes information from a storage
device.
CAUTION: The secure Data Wipe operation deletes information in a
way that it cannot be reconstructed.
Commands such as delete and format in the operating system may remove
files from showing up in the file system. However, they can be reconstructed
through forensic means as they are still represented on the physical media.
Data Wipe prevents this reconstruction and is not recoverable.
When enabled, the data wipe option will prompt to wipe any storage devices
that are connected to the computer on the next boot.
By default, the OFF option is disabled.
Absolute®
Absolute® Absolute Software provides various cyber security solutions, some requiring
software preloaded on Dell computers and integrated into the BIOS. To
use these features, you must enable the Absolute BIOS setting and contact
Absolute for configuration and activation.
By default, the Enable Absolute option is enabled.
For additional security, Dell Technologies recommends keeping the Absolute
option enabled.
BIOS Setup 87
To Next Page
Loading...
