Table 9. Security (continued)
Option Description
● Attestation Enable—This option is enabled by default.
● Key Storage Enable—This option is enabled by default.
● SHA-256—This option is enabled by default.
● Clear
● TPM State—This option is enabled by default.
Intel Software Guard
Extensions
Provides a secure environment for running code or storing sensitive information in the context of
the main operating system and sets enclave reserve memory size.
Intel SGX
The options are:
● Disabled
● Enabled
● Software Control—This option is enabled by default.
SMM Security
Mitigation
Allows you to enable or disable additional UEFI SMM Security Mitigation protection.
SMM Security Mitigation - By default, this option is enabled.
Data Wipe on Next Boot
Allows BIOS to queue up data wipe cycle for storage devices connected to the motherboard on
the next reboot.
Start Data Wipe - By default, this option is disabled.
NOTE: Secure Wipe operation deletes information in a way that it cannot be reconstructed.
Absolute This field allows you to Enable, Disable, or Permanently Disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute® Software.
The options are:
● Enable Absolute—This option is enabled by default.
● Disable Absolute
● Permanently Disable Absolute
UEFI Boot Path Security
Controls whether the system prompts the user to enter the admin password (if set) when
booting to a UEFI boot path device from the F12 boot menu.
The options are:
● Never
● Always
● Always Except Internal HDD—This option is enabled by default.
● Always Except Internal HDD&PXE
Password
Table 10. Security
Option Description
Admin Password
Allows you to set, change, or delete the administrator (admin) password.
The entries to set password are:
● Enter the old password:
● Enter the new password:
Press Enter once you enter the new password and again press Enter to confirm the new
password.
System setup 103
To Next Page
Loading...
