Dell G15 5535 Owner's Manual page 96

Table 28. System setup options—Security menu (continued)
Security
Enable OS Kernel DMA Support
UEFI Firmware Capsule Updates
Secure Boot
Secure Boot Database
Secure Boot Status
Secure Boot Mode
User Customized Security
Secure Boot
Select Secure Mode
Expert Key Management
96 BIOS setup
By default, the Enable Pre-Boot DMA Support option is
enabled.
For additional security, Dell Technologies recommends
keeping the Enable Pre-Boot DMA Support option
enabled.
NOTE: This option is provided only for compatibility
purposes, since some older hardware is not DMA
capable.
Allows you to control the Kernel DMA protection for
both internal and external ports. This option does not
directly enable DMA protection in the operating system.
For operating systems that support DMA protection, this
setting indicates to the operating system that the BIOS
supports the feature.
NOTE: This option is not available when the
virtualization setting for IOMMU is disabled (VT-d/AMD
Vi).
By default, the Enable OS Kernel DMA Support option is
enabled.
NOTE: This option is provided only for compatibility
purposes, since some older hardware is not DMA
capable.
Enables or disables BIOS updates through UEFI capsule
update packages.
By default, the UEFI Firmware Capsule Updates option is
enabled.
Displays the status of secure boot database.
Displays the status of secure boot.
Displays the mode of secure boot.
Displays the status of presence of user customized security.
Enables the computer to boot using only validated boot
software.
By default, the Enable Secure Boot option is enabled.
For additional security, Dell Technologies recommends
keeping the Secure Boot option enabled to ensure that the
UEFI firmware validates the operating system during the
boot process.
NOTE: For Secure Boot to be enabled, the computer
is required to be in UEFI boot mode and the Enable
Legacy Option ROMs option is required to be turned
off.
Enables or disables the Secure Boot operation mode.
By default, the Deployed Mode is selected.
NOTE: Deployed Mode should be selected for normal
operation of Secure Boot.