Dell Alienware Aurora R15 Service Manual page 103

Table 8. System setup options—Security menu (continued)
Security
PPI Bypass for SED Block SID Command
Password Change
Absolute
Firmware TPM
PPI Bypass for Clear Command
UEFI Firmware Capsule Updates
Windows SMM Security Mitigations Table
Enable Pre-Boot DMA Protection
Enable OS Kernel DMA Support
Secure Boot
Secure Boot
Secure Boot Mode
Expert Key Management
Custom Mode
Enable Microsoft UEFI CA
PK
KEK
Allows you to enable or disable PPI Bypass for SED Block
SID Command.
Default: Disabled
Allows you to enable or disable password change on the
computer.
Default: Permitted
Enable or disable the BIOS module interface of the optional
Absolute Persistence Module service from Absolute
Software.
Default: Enabled
Displays the firmware TPM state.
Default: Enabled
Enable or disable the TPM Physical Presence Interface
(PPI). When enabled, this setting will allow the OS to skip
BIOS PPI user prompts when issuing the Clear command.
Changes to this setting take effect immediately.
Default: Disabled
Enables or disables BIOS updates through UEFI capsule
update packages.
Default: Enabled
Enables or disables Windows SMM Security Mitigation
protections.
Default: Disabled
Enables or disables Pre-Boot DMA Protection.
Default: Enabled
Enables or disables OS Kernel DMA Support.
Default: Enabled
Enables secure boot using only validated boot software.
Default: Disabled
Modifies the behavior of Secure Boot to allow evaluation
or enforcement of UEFI driver signatures. Deployed Mode
should be selected for normal operation of Secure Boot.
Default: Deployed Mode
Allows you to enable or disable Custom Mode. When
enabled, it allows the PK, KEK, db, and dbx security key
databases to be modified.
Default: Disabled
Allows you to enable or disable Microsoft UEFI CA.
Default: Enabled
Allows for selection of key database.
● Delete All Keys will delete the selected key.
System setup 103