l
Active PCR banks
l
Available PCR banks
* The following features are available when the TPM 2.0 (either onboard or external) is
detected by the BIOS.
SHA256 PCR Bank (Available when "Security Device Support" is set to Enabled)
Select Enabled to enable SHA256 PCR Bank support to enhance system integrity and data
security. The options are Disabled and Enabled.
SHA384 PCR Bank (Available when "Security Device Support" is set to Enabled)
Select Enabled to enable SHA384 PCR Bank support to enhance system integrity and data
security. The options are Disabled and Enabled.
Pending Operation (Available when "Security Device Support" is set to Enabled)
Use this feature to schedule a TPM-related operation to be performed by the security TPM
(either onboard or external) at the next system boot to enhance system data integrity. The
options are None and TPM Clear.
Note: If this feature is used, your system will reboot to carry out a pending TPM operation.
Platform Hierarchy (Available when "Security Device Support" is set to Enabled)
Select Enabled for TPM Platform Hierarchy support, which allows the manufacturer to utilize
the cryptographic algorithm to define a constant key or a fixed set of keys to be used for initial
system boot. These early boot codes are shipped with the platform and are included in the list
of "public keys." During system boot, the platform firmware uses the trusted public keys to
verify a digital signature in an attempt to manage and control the security of the platform
firmware used in a host system via the TPM (either onboard or external). The options are
Disabled and Enabled.
Storage Hierarchy (Available when "Security Device Support" is set to Enabled)
Select Enabled for TPM Storage Hierarchy support that is intended to be used for non-privacy-
sensitive operations by a platform owner such as an IT professional or the end user. Storage
Hierarchy has an owner policy and an authorization value, both of which can be set and are
held constant (-rarely changed) through reboots. This hierarchy can be cleared or changed
independently of the other hierarchies. The options are Disabled and Enabled.
Endorsement Hierarchy (Available when "Security Device Support" is set to Enabled)
Select Enabled for Endorsement Hierarchy support, which contains separate controls to
address the user's privacy concerns because the primary keys in the hierarchy are certified by
the TPM key or by a manufacturer with restrictions on how an authentic TPM (either onboard or
external) that is attached to an authentic platform can be accessed and used. A primary key
118
X14SAE/X14SAE-F: UEFI BIOS
To Next Page
Loading...
