Dell P175G Owner's Manual page 124

Table 42. System setup options—Security menu
Security
Intel Platform Trust Technology (PTT)
PTT On
Physical Presence Interface (PPI) Bypass
for Clear Commands
Clear
Intel Total Memory Encryption
Multi-Key Total Memory Encryption
(Up to 16 keys)
Chassis intrusion
Chassis Intrusion Detection
Block Boot Until Cleared
SMM Security Mitigation
124 BIOS Setup
Intel PTT is a firmware-based Trusted Platform Module (fTPM) device that is
part of Intel chipsets. It provides credential storage and key management that
can replace the equivalent functionality of a discrete TPM chip.
NOTE: The options that are listed apply to computers with a discrete
Trusted Platform Module (TPM).
Enables or disables the Intel PTT option.
By default, the PTT On option is enabled.
For additional security, Dell Technologies recommends keeping the PTT On
option enabled.
The PPI Bypass for Clear Commands option allows the operating system to
manage certain aspects of PTT. When enabled, you are not prompted to confirm
changes to the PTT configuration.
By default, the PPI Bypass for Clear Commands option is disabled.
For additional security, Dell Technologies recommends keeping the PPI Bypass
for Clear Commands option disabled.
When enabled, the Clear option clears the information that is stored in the PTT
fTPM after exiting the computer's BIOS. This option returns to the disabled state
when the computer restarts.
By default, the Clear option is disabled.
Dell Technologies recommends enabling the Clear option only when PTT fTPM
data needs to be cleared.
When enabled, it protects memory from physical attacks.
By default, the Multi-Key Total Memory Encryption (Up to 16 keys) option is
disabled.
The chassis intrusion detection enables a physical switch that triggers an event
when the computer cover is opened.
When set to Enabled, a notification is displayed on the next boot and the event
is logged in the BIOS Events log.
When set to On-Silent, the event is logged in the BIOS Events log, but no
notification is displayed.
When set to Disabled, no notification is displayed and no event is logged in the
BIOS Events log.
By default, the Chassis Intrusion Detection option is enabled.
For additional security, Dell Technologies recommends keeping the Chassis
Intrusion Detection option enabled.
Enables or disables the Block Boot Until Cleared option.
By default, the Block Boot Until Cleared option is enabled.
NOTE: When enabled, the computer does not boot until the chassis intrusion
is cleared. If the administrator password is set, Setup has to be unlocked
before the warning can be cleared.
Enables or disables additional UEFI SMM Security Mitigation protections. This
option uses the Windows SMM Security Mitigations Table (WSMT) to confirm to
the operating system that security best practices have been implemented by the
UEFI firmware.