Table of Contents
Advertisement
Table 38. System setup options—Passwords menu (continued)
Passwords
Password Changes
Allow Non-Admin Password Changes
Admin Setup Lockout
Master Password Lockout
Enable Master Password Lockout
Allow Non-Admin PSID Revert
Enable Allow Non-Admin PSID Revert
Table 39. System setup options—Update, Recovery menu
Update, Recovery
UEFI Capsule Firmware Updates
Enable UEFI Capsule Firmware Updates
BIOS Recovery from Hard Drive
For additional security, Dell Technologies recommends keeping the Password
Bypass option disabled.
The Allow Non-Admin Password Changes option in BIOS setup allows an end
user to set or change the computer or hard drive passwords without entering
the administrator password. This gives an administrator control over the BIOS
settings but enables an end user to provide their own password.
By default, the Allow Non-Admin Password Changes option is enabled.
For additional security, Dell Technologies recommends keeping the Allow Non-
Admin Password Changes option enabled.
The Admin Setup Lockout option prevents an end user from even viewing the
BIOS setup configuration without first entering the administrator password (if
set).
By default, the Admin Setup Lockout option is disabled.
For additional security, Dell Technologies recommends keeping the Admin Setup
Lockout option disabled.
The Master Password Lockout setting allows you to disable the Recovery
Password feature. If the computer, administrator, or hard drive password is
forgotten, the computer becomes unusable.
NOTE:
When an internal solid-state drive password is set, it must first be
cleared before Master Password Lockout can be changed.
By default, the Enable Master Password Lockout option is disabled.
Dell Technologies does not recommend enabling the Master Password Lockout
unless you have implemented your own password recovery computer.
Allows you to control access to the Physical Security ID (PSID) revert of NVMe
hard-drives from the Dell Security Manager prompt.
When enabled, PSID revert is allowed to proceed without providing the BIOS
Admin password.
By default, the Enable Allow Non-Admin PSID Revert option is disabled.
Enables or disables BIOS updates through UEFI capsule update packages.
NOTE:
Disabling this option blocks the BIOS updates from services such as
Microsoft Windows Update and Linux Vendor Firmware Service (LVFS).
By default, the Enable UEFI Capsule Firmware Updates option is enabled.
Enables or disables the user to recover from certain corrupted BIOS conditions
from a recovery file on the user primary hard drive or an external USB key.
By default, the BIOS Recovery from Hard Drive option is enabled.
NOTE:
BIOS Recovery from Hard Drive is not available for self-encrypting
drives (SED).
NOTE:
BIOS recovery is designed to fix the main BIOS block and cannot work
if the Boot Block is damaged. In addition, this feature cannot work in the
BIOS Setup
151
Advertisement
Table of Contents
