Security - Dell Latitude 5411 Service Manual

Security

Table 4. Security
Option
Admin Password
System Password
Internal HDD-2 Password
Strong Password
Password Configuration
Password Bypass
Password Change
UEFI Capsule Firmware Updates
TPM 2.0 Security
Absolute
OROM Keyboard Access
90 System setup
Description
Allows you to set, change, and delete the admin password.
Allows you to set, change, and delete the system password.
This option lets you set, change, or delete the password on the system's internal hard disk drive
(HDD).
This option lets you enable or disable strong passwords for the system.
Allows you to control the minimum and maximum number of characters allowed for a administrative
password and the system password. The range of characters is between 4 and 32.
This option lets you bypass the System (Boot) Password and the internal HDD password prompts
during a system restart.
• Disabled — Always prompt for the system and internal HDD password when they are set. This
option is enabled by default.
• Reboot Bypass — Bypass the password prompts on Restarts (warm boots).
NOTE: The system will always prompt for the system and internal HDD passwords
when powered on from the off state (a cold boot). Also, the system will always prompt
for passwords on any module bay HDDs that may be present.
This option lets you determine whether changes to the System and Hard Disk passwords are
permitted when an administrator password is set.
Allow Non-Admin Password Changes - This option is enabled by default.
This option controls whether this system allows BIOS updates via UEFI capsule update packages.
This option is selected by default. Disabling this option will block BIOS updates from services such as
Microsoft Windows Update and Linux Vendor Firmware Service (LVFS)
Allows you to control whether the Trusted Platform Module (TPM) is visible to the operating
system.
• TPM On (default)
• Clear
• PPI Bypass for Enable Commands
• PPI Bypass for Disable Commands
• PPI Bypass for Clear Commands
• Attestation Enable (default)
• Key Storage Enable (default)
• SHA-256 (default)
Choose any one option:
• Disabled
• Enabled (default)
This field lets you Enable, Disable or Permanently Disable the BIOS module interface of the optional
Absolute Persistence Module service from Absolute Software.
• Enabled - This option is selected by default.
• Disabled
• Permanently Disabled
This option determines whether users are able to enter Option ROM configuration screen via
hotkeys during boot.
• Enabled (default)
• Disabled
• One Time Enable