Table 5. Video
Option Description
Brightness on battery power Set the screen brightness when running on battery power
Brightness on AC power Set the screen brightness when running on AC power
Security
Table 6. Security
Option Description
Enable Admin Setup Lockout This feature gives administrators control over how their users can or cannot access BIOS
Setup. With an admin password set and this option On, BIOS Setup cannot be seen without
the admin password. With an admin password set and this option Off, BIOS Setup can be
entered and items viewed in the locked mode.
Password Bypass When enabled, this always prompts for system and internal hard drive passwords when
powered on from the Off state.
● Disabled (enabled by default)
● Reboot Bypass
Enable Non-Admin Password
Changes
Allow Wireless Switch Changes: This option lets you change the system and hard drive
password without the need for admin password (Disabled by default).
Non-Admin Setup Changes This option lets you determine whether changes to the setup option are permitted when an
Administrator password is set.
UEFI Capsule Firmware
Updates
This option controls whether this system allows BIOS updates via UEFI capsule update
packages. This option is selected by default. Disabling this option will block BIOS updates
from services such as Microsoft Windows Update and Linux Vendor Firmware Service
(LVFS)
Password Bypass This option lets you bypass the System (Boot) Password and the internal HDD password
prompts during a system restart.
● Disabled — Always prompt for the system and internal HDD password when they are set.
This option is enabled by default.
● Reboot Bypass — Bypass the password prompts on Restarts (warm boots).
NOTE: The system will always prompt for the system and internal HDD passwords when
powered on from the off state (a cold boot). Also, the system will always prompt for
passwords on any module bay HDDs that may be present.
Password Change This option lets you determine whether changes to the System and Hard Disk passwords are
permitted when an administrator password is set.
Allow Non-Admin Password Changes - This option is enabled by default.
UEFI Capsule Firmware
Updates
This option controls whether this system allows BIOS updates via UEFI capsule update
packages. This option is selected by default. Disabling this option will block BIOS updates
from services such as Microsoft Windows Update and Linux Vendor Firmware Service
(LVFS)
TPM 2.0 Security On Allows you to control whether the Trusted Platform Module (TPM) is visible to the operating
system.
● TPM On (default)
● Clear
● PPI Bypass for Enable Commands
● PPI Bypass for Disable Commands
● PPI Bypass for Clear Commands
● Attestation Enable (default)
● Key Storage Enable (default)
● SHA-256 (default)
System setup 69