Table 6. Security (continued)
Option Description
Choose any one option:
● Disabled
● Enabled (default)
Absolute This field lets you Enable, Disable or Permanently Disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute Software.
● Enabled - This option is selected by default.
● Disabled
● Permanently Disabled
Intel SGX Allows you to provide a secured environment for running code/storing sensitive information
in the context of the main OS. This option is not set by default.
● Disabled
● Enabled
● Software Control - This option is selected by default.
SMM Security Mitigation Allows you to enable or disable additional UEFI SMM Security Mitigation protections. This
option is not set by default.
Passwords
Table 7. Passwords
Option Description
Enable Strong Passords Allows stricter rules for admin and system passwords.
SPassword configuration
● Admin Password Min
● Admin Password max
● System Password Min
● System Password Max
Admin Password This field lets you set, change, or delete the administrator (admin) password. The admin
password enables several security features.
System Password This fields allows you to set the System password.
Enable master password lockout This field disables the master password support. Hard disk passwords need to be cleared
before the setting can be changed. This option is disabled by default.
Secure boot
Table 8. Secure Boot
Option Description
Secure Boot Enable Allows you to enable or disable Secure Boot feature
● Secure Boot Enable
Option is not selected. For Secure Boot to be enabled, the system needs to be in UEFI boot
mode.
Secure Boot Mode Allows you to modify the behavior of Secure Boot to allow evaluation or enforcement of
UEFI driver signatures.
● Deployed Mode (default)
● Audit Mode
Expert key Management Allows you to manipulate the security key databases only if the system is in Custom Mode.
The Enable Custom Mode option is disabled by default. The options are:
70 System setup
To Next Page
Loading...
