Internal Device Access
• Internal Storage Tamper Detection
Values: Disabled, Enabled
Descriptions: When this option is enabled, removing any internal storage device when your computer is in
sleep mode will be detected. If you remove the internal storage device while the computer is in sleep
mode, the computer will shut down when you wake it up, and any unsaved data will be lost.
Anti-Theft
• Computrace Module Activation
Values: Disabled, Enabled, Permanently Disabled
Descriptions: Enable the UEFI BIOS interface to activate the computrace module. Computrace is an
optional monitoring service from Absolute Software. If you select Permanently Disabled, you cannot
enable this setting again.
Secure Boot
• Secure Boot
Values: Disabled, Enabled
Descriptions: Enable this option to prevent unauthorized operating systems from loading when you turn
on the computer.
• Platform Mode
Values: Setup Mode, User Mode
Descriptions: Specify the system operating mode.
• Secure Boot Mode
Values: Standard Mode, Custom Mode
Descriptions: Specify the Secure Boot mode.
• Reset to Setup Mode
Descriptions: Use this option to clear the current platform key and reset Platform Mode to Setup Mode.
• Restore Factory Keys
Descriptions: Use this option to restore all keys and certificates in Secure Boot databases to the factory
defaults.
• Clear All Secure Boot Keys
Descriptions: Use this option to clear all keys and certificates in Secure Boot databases and install your
own keys and certificates.
Intel (R) SGX
• Intel (R) SGX Control
Values: Disabled, Enabled, Software Controlled
Descriptions: Enable or disable the Intel Software Guard Extensions (SGX) function. If you select Software
Controlled, SGX will be controlled by the operating system.
• Owner EPOCH Change
Value: Enter
Descriptions: Change Owner EPOCH to a random value. Use this option to clear SGX user data.
Device Guard
• Device Guard
Chapter 6. Advanced configuration 53
To Next Page
Loading...
