Table of Contents
Advertisement
Security
Absolute(R)
Admin Setup Lockout
Master Password Lockout
SIMM Security Mitigation
Table 7. System setup options—Secure Boot menu
Secure Boot
Secure Boot Enable
Secure Boot Mode
Expert Key Management
Table 8. System setup options—Intel Software Guard Extensions menu
Intel Software Guard Extensions
Intel SGX Enable
By default, PTT On is not selected.
Enable or disable the BIOS module interface of the optional Absolute Persistence
Module Service from Absolute Software.
•
Enabled (default)
•
Disabled
•
Permanently Disabled
Enable to prevent users from entering Setup when an Admin Password is set.
By default, Enable Admin Setup Lockout is not selected.
When enabled, this option disables the master password support.
By default, Enable Master Password Lockout is not selected.
Allows you to enable or disable the additional UEFI SIMM Security Mitigation
protections.
By default, SMM Security Mitigation is not selected.
Enable or disable the secure boot feature.
By default, Secure Boot Enable is not selected.
Set the Secure Boot Mode to allow evaluation or enforcement of UEFI driver
signatures.
•
Deployed Mode (default)
•
Audit Mode
Allows you to manipulate the security key databases only if the computer is in Custom
Mode.
By default, Enable Custom Mode is selected.
If Enable Custom Mode is selected, the options are:
•
PK (default)
•
KEK
•
db
•
dbx
After selecting an option, the subsequent actions are:
•
Save to File—Saves the key to a user-selected file.
•
Replace from File—Replaces the current key with a key from a user-selected
file.
•
Append from File—Adds a key to the current database from a user-selected file
•
Delete—Deletes the selected key
Enable or disable Intel Software Guard Extensions that provides a secure
environment for running code or storing sensitive information in the context of the
main OS. The options are:
•
Disabled
•
Enabled
•
Software Controlled (default)
System setup
63
Hide quick links:
Advertisement
Table of Contents
