Table 34. System setup options—Passwords menu(continued)
Passwords
Enable Admin Setup Lockout The Enable Admin Setup Lockout option prevents an end user from even
viewing the BIOS setup configuration without first entering the administrator
password (if set).
By default, the OFF option is disabled.
For additional security, Dell Technologies recommends keeping the Enable
Admin Setup Lockout option disabled.
Master Password Lockout
Enable Master Password Lockout The Master Password Lockout setting allows you to disable the Recovery
Password feature. If the computer, administrator, or hard drive password is
forgotten, the computer becomes unusable.
NOTE: When the owner password is set, the Master Password Lockout
option is not available.
NOTE: When an internal hard drive password is set, it must first be cleared
before Master Password Lockout can be changed.
By default, the OFF option is disabled.
Dell does not recommend enabling the Master Password Lockout unless you
have implemented your own password recovery computer.
Allow Non-Admin PSID Revert
Enable Allow Non-Admin PSID Revert Controls access to the Physical Security ID (PSID) revert of NVMe hard-drives
from the Dell Security Manager prompt.
By default, the OFF option is disabled.
Table 35. System setup options—Update, Recovery menu
Update, Recovery
UEFI Capsule Firmware Updates
Enable UEFI Capsule Firmware
Updates
Enables or disables BIOS updates through UEFI capsule update packages.
NOTE: Disabling this option blocks the BIOS updates from services such as
Microsoft Windows Update and Linux Vendor Firmware Service (LVFS).
By default, the Enable UEFI Capsule Firmware Updates option is enabled.
BIOS Recovery from Hard Drive Enables or disables the user to recover from certain corrupted BIOS conditions
from a recovery file on the user primary hard drive or an external USB key.
By default, the ON option is enabled.
NOTE: BIOS Recovery from Hard Drive is not available for self-encrypting
drives (SED).
NOTE: BIOS recovery is designed to fix the main BIOS block and cannot
work if the Boot Block is damaged. In addition, this feature cannot work
in the event of EC corruption, ME corruption, or a hardware issue. The
recovery image must exist on an unencrypted partition on the drive.
BIOS Downgrade
Allow BIOS Downgrade Controls flashing of the computer firmware to previous revisions.
By default, the ON option is enabled.
SupportAssist OS Recovery Enables or disables the boot flow for SupportAssist OS Recovery tool in the
event of certain computer errors.
By default, the ON option is enabled.
BIOS Setup 89
To Next Page
Loading...
