Security - Dell Vostro 3000 Setup And Specifications Manual

Security

This section provides security details and settings.
Table 35. Security
Options
TPM 2.0 Security
TPM 2.0 Security On
PPI Bypass for Enabled Commands
PPI Bypass for Disabled Commands
PPI Bypass for Clear Commands
Attestation Enable
Key Storage Enable
SHA-256
Clear
TPM State
Intel Software Guard Extension
Intel SGX
SMM Security Mitigation
Data Wipe on Next Boot
32 System setup
Description
This section contains a toggle switch to select whether
Trusted Platform Module(TPM) is visible to the Operating
System(OS).
This section contains a toggle switch which controls the TPM
Physical Presence Interface(PPI). When enabled, this setting
allows the OS to skip BIOS PPI user prompts when issuing
TPM PPI enable and activate commands.
This section contains a toggle switch which controls the TPM
Physical Presence Interface(PPI). When enabled, this setting
will allow the OS to skip BIOS PPI user prompts when issuing
TPM PPI disable and deactivate commands(#2, 4, 7, 9, & 11).
This section contains a toggle switch which controls the TPM
Physical Presence Interface(PPI). When enabled, this setting
will allow the OS to skip BIOS PPI user prompts when issuing
the clear command.
This section contains toggle switch which lets the user control
whether the TPM Endorsement Hierarchy is available to the
OS.
This sections contains a toggle switch that allows the user
to control whether TPM Storage Hierarchy is available to the
operating system.
This sections contains a toggle switch that when enabled,
allows the BIOS and the TPM to use the SHA-256 hash
algorithm to extend measurements into the TPM PCRs during
BIOS boot.
This section contains toggle switch which clears the TPM
owner information, and returns the TPM to the default state.
This section allows the user to enable or disable the TPM. this
is the normal operating state for the TPM when you want to
use its complete arrays of capabilities.
This sections allows the user to select the Intel Software
Guard Extension Enclave Reserve Memory Size. The options
are as follows:
● Disabled
● Enabled
● Software Control
This section allows the user to enable or disable UEFI SMM
security Mitigation protections.