106
Security Device Support
security (TPM) device will be enabled in the BIOS to enhance data integrity and system
security. Please note that the OS will not show the security device. Neither TCG EFI protocol
nor INT1A interaction will be made available for use. If you have made changes on the setting
Disable and Enable. If this option is set to Enable, the following screen and items will display:
• Active PCR Banks
• Available PCR Banks
SHA256 PCR Bank
Select Enabled to enable SHA256 PCR Bank support to enhance system security and data
integrity. The options are Enabled and Disabled.
Pending Operation
device at the next system boot to enhance system data integrity. Your system will reboot to
carry out a pending TPM operation. The options are None and TPM Clear.
Note: Your system will reboot to carry out a pending TPM operation.
Platform Hierarchy (for TPM Version 2.0 and above)
Select Enabled for TPM Platform Hierarchy support which will allow the manufacturer to utilize
system boot. These early boot codes are shipped with the platform and are included in the
to verify a digital signature in an attempt to manage and control the security of the platform
Enabled and Disabled.
Storage Hierarchy
sensitive operations by the platform owner such as an IT professional or the end user. Storage
Hierarchy has an owner policy and an authorization value, both of which can be set and are
independently of the other hierarchies. The options are Enabled and Disabled.
Endorsement Hierarchy
Select Enabled for Endorsement Hierarchy support, which contains separate controls to