Dell Precision 5550 Service Manual page 52

Table 7. System setup options—Security menu(continued)
Security
Non-Admin Setup Changes
Enable UEFI Capsule Firmware Updates
Absolute
TPM 2.0 Security On
PPI Bypass for Enable Commands
PPI Bypass for Disable Commands
PPI Bypass for Clear Commands
Attestation Enable
Key Storage Enable
SHA-256
Clear
TPM State
SMM Security Mitigation
Intel SGX
52 System setup
Enables or disables BIOS updates through UEFI capsule update packages.
Default: ON
Enables, disables or permanently disable the BIOS module interface of the optional
Absolute Persistence Module service from Absolute Software.
Default: Enabled
Select whether or not the Trusted Platform Model (TPM) is visible to the OS.
Default: ON
Enables or disables the OS to skip BIOS Physical Presence Interface (PPI) user
prompts when issuing TPM PPI enabled and activate commands.
Default: OFF
Enables or disables The OS to skip BIOS PPI user prompts when issuing TPM PPI
Disable and Deactivate commands.
Default: OFF
Enables or disables the operating system to skip BIOS Physical Presence Interface
(PPI) user prompts when issuing the Clear command.
Default: OFF
Enables to control whether the TPM Endorsement Hierarchy is available to the OS.
Disabling this setting restricts the ability to use the TPM for signature operations.
Default: ON
Enables to control whether the TPM Endorsement Hierarchy is available to the OS.
Disabling this setting restricts the ability to use the TPM for storing owner data.
Default: ON
Enables or disables the BIOS and the TPM to use the SHA-256 hash algorithm to
extend measurements into the TPM PCRs during BIOS boot.
Default: ON
Enables or disables the computer to clear the PTT owner information, and returns
the PTT to the default state.
Default: OFF
Enables or disables the TPM. This is the normal operating state for the TPM when
you want to use its complete array of capabilities.
Default: Enabled
Enables or disables additional UEFI SMM Security Mitigation protections.
Default: OFF
NOTE: This feature may cause compatibility issues or loss of
functionality with some legacy tools and applications.
Enables or disables the Intel Software Guard Extensions (SGX) to provide a secured
environment for running code/storing sensitive information.
Default: Software Control