Dell Latitude 7330 Rugged Extreme Service Manual page 112

Table 14. System setup options—Security menu (continued)
Security
SHA-256
Clear
PPI Bypass for Clear Commands
Intel Total Memory Encryption
Total Memory Encryption
Chassis intrusion
Clear Intrusion Warning
SMM Security Mitigation
Data Wipe on Next Boot
Start Data Wipe
Absolute
UEFI Boot Path Security
Authenticated BIOS Interface
Enable Authenticated BIOS Interface
Legacy Manageability Interface Access
Table 15. System setup options—Passwords menu
Passwords
Admin Password
System Password
112 BIOS setup
By default, the Key Storage Enable option is enabled.
When enabled, the BIOS and TPM will use the SHA-256 hash algorithm to
extend measurements into the TPM PCRs during BIOS boot.
By default, the SHA-256 option is enabled.
Enables to clear the TPM owner information and returns the TPM to the
default state.
By default, the Clear option is disabled.
Controls the TPM Physical Presence Interface (PPI).
By default, the PPI ByPass for clear Commands option is disabled.
Enable or disable you to protect memory from physical attacks including freeze
spray, probing DDR to read the cycles, and others.
By default, the Total Memory Encryption option is disabled.
Controls the chassis intrusion feature.
By default, the On-Silent option is enabled.
By default, the option is disabled.
Enable or disable additional UEFI SMM Security Mitigation protections.
By default, the option is enabled.
Enable or disable the data wipe on next boot.
By default, the Start Data Wipe option is disabled.
Enable or disable or permanently disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute software.
By default, the option is enabled.
WARNING: The 'Permanently Disabled' option can only be
selected once. When 'Permanently Disabled' is selected, Absolute
Persistence cannot be re-enabled. No further changes to the
Enable/Disable states are allowed.
NOTE: The Enable/Disable options will be unavailable while Computrace is
in the activated state.
Controls whether the system will prompt the user to enter the admin password
(if set) when booting to a UEFI boot path device from the F12 boot menu.
By default, the Always Except Internal HDD option is enabled.
By default, the option is disabled.
By default, the option is disabled.
Set, change, or delete the administrator password.
Set, change, or delete the system password.