Table of Contents
Advertisement
Option
Password Bypass
Password Change
UEFI Capsule Firmware Updates
TPM 2.0 Security
Absolute
Chassis Intrusion
OROM Keyboard Access
Admin Setup Lockout
Master Password Lockout
SMM Security Mitigation
26
System setup
Description
This option enables you to bypass the System (Boot) password and the internal hard drive password
prompts during a system restart.
•
Disabled—Always prompt for the system and internal hard drive password when they are set.
This option is enabled by default.
•
Reboot Bypass—Bypass the password prompts on restarts (warm boots).
NOTE:
The system always prompts for the system and internal hard drive passwords
when powered on from the off state (a cold boot). Also, the system prompts for
passwords on any module bay HDDs that may be present.
This option lets you determine whether changes to the System and Hard Disk passwords are
permitted when an administrator password is set.
Allow Non-Admin Password Changes - This option is enabled by default.
This option controls whether this system enables BIOS updates through UEFI capsule update
packages. This option is enabled by default. Disabling this option blocks BIOS updates from services
such as Microsoft Windows Update and Linux Vendor Firmware Service (LVFS)
Allows you to control whether the Trusted Platform Module (TPM) is visible to the operating
system.
•
TPM On—enabled by default
•
Clear
•
PPI Bypass for Enable Commands
•
PPI Bypass for Disable Commands
•
PPI Bypass for Clear Commands
•
Attestation Enable—enabled by default
•
Key Storage Enable—enabled by default
•
SHA-256—enabled by default
The options are:
•
Disabled
•
Enabled—enabled by default
This field enables you to enable, disable, or permanently disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute Software.
•
Enabled—enabled by default
•
Disabled
•
Permanently Disabled
This field controls the chassis intrusion feature.
The options are:
•
Disabled—enabled by default
•
Enabled
•
On-Silent
This option determines whether users can enter Option ROM Configuration screens through hotkeys
during the system boot.
•
Disabled
•
Enabled—enabled by default
•
One Time Enable
Allows you to prevent users from entering the setup when Admin password is set. This option is
disabled by default.
When enabled, this option disables master password support. This option is disabled by default.
Allows you to enable or disable another UEFI SMM Security Mitigation protections. This option is
disabled by default.
Advertisement
Table of Contents
