Table of Contents
Advertisement
Table 5. System setup options—Security menu (continued)
Security
Password Bypass
Password Change
Non-Admin Setup Changes
UEFI Capsule Firmware Updates
TPM 2.0 Security
Absolute
Admin Setup Lockout
Master Password Lockout
SMM Security Mitigation
Table 6. System setup options—Secure Boot menu
Secure Boot
Secure Boot Enable
Secure Boot Mode
Expert Key Management
Expert Key Management
Custom Mode Key Management
Table 7. System setup options—Intel Software Guard Extensions menu
Intel Software Guard Extensions
Intel SGX Enable
Enclave Memory Size
Table 8. System setup options—Performance menu
Performance
Multi-Core Support
Intel SpeedStep
Bypass the System (Boot) Password and the internal HDD password prompts
during a system restart.
Enable or disable changes to the System and Hard Disk passwords when an
administrator password is set.
Enable or disable changes to the setup options when an administrator
password is set.
Enable or disable BIOS updates through UEFI capsule update packages.
Enables you to control whether the Trusted platform Module (TPM) must be
visible to the operating system.
Enable or disable the BIOS module interface of the optional Absolute
Persistence Module service from
Enable to prevent users from entering Setup when an Admin Password is set.
Enable to disable master password support.
NOTE:
Hard Disk passwords need to be cleared before the setting can be
changed.
Enables or disables additional UEFI SMM Security Mitigation protections.
Enables or disables the computer to boot using only validated boot software.
Default: OFF.
NOTE:
For Secure Boot to be enabled, the computer needs to be in UEFI
boot mode and the Enable Legacy Option ROMs option needs to be turned
off.
Selects the Secure Boot operation mode.
Default: Deployed Mode.
NOTE:
Deployed Mode should be selected for normal operation of Secure
Boot.
Enable or disable Expert Key Management.
Select the custom values for Expert Key Management.
Enable or disable Intel Software Guard Extensions.
Set the Intel Software Guard Extensions Enclave Reserve Memory Size.
Changes the number of CPU cores available to the operating system. The
default value is set to the maximum number of cores.
Default: All Cores.
Enables or disables the Intel SpeedStep Technology to dynamically adjust
processor voltage and core frequency, decreasing average power consumption
and heat production.
System setup
71
Advertisement
Table of Contents
