Dell Latitude 5491 Setup And Specifications Manual page 24

Option Description
Password Bypass Allows you to enable or disable the permission to bypass the System and the Internal HDD password,
when they are set. The options are:
● Disabled
● Reboot bypass
Default setting: Disabled
Password Allows you to enable the disable permission to the System and Hard Drive passwords when the admin
Change password is set.
Default setting: Allow Non-Admin Password Changes is selected.
Non-Admin Setup Allows you to determine whether changes to the setup options are allowed when an Administrator
Changes Password is set. If disabled the setup options are locked by the admin password. The option "Allow
Wireless Switch changes" is disabled by default
UEFI Capsule Allows yout to control whether this system allows BIOS updates via UEFI capsule update packages.
Firmware
● Enable UEFI Capsule Firmware Updates (enabled by default)
Updates
TPM 2.0 Security Allows you to enable the Trusted Platform Module (TPM) during POST. The options are:
● TPM On: This option is enabled by default.
● Clear
● PPI Bypass for Enabled Commands
● Attestation Enable (This option is enabled by default)
● Key Storage Enable (This option is enabled by default)
● PPI Bypass for Disable Commands
● PPI Bypass for Clear Commands (This option is enabled by default)
● SHA-256: This option is enabled by default.
● Disabled
● Enabled (This option is enabled by default)
Computrace Allows you to activate or disable the optional Computrace software The options are:
● Deactivate
● Disable
● Activate
CPU XD Support Allows you to enable the Execute Disable mode of the processor.
Enable CPU XD Support (default)
OROM Keyboard Allows you to set an option to enter the Option ROM Configuration screens using hotkeys during boot.
Access The options are:
● Enabled
● One Time Enable
● Disabled
Default setting: Enabled
Admin Setup Allows you to prevent users from entering Setup when an Administrator password is set.
Lockout
Default Setting: Disabled
Master Password Allows you to disable master password support. Hard disk password need to be cleared before the setting
Lockout can be changed
● Enable Master Password Lockout
Default setting: Disabled
SMM Security The option SMM Security Mitigation is not selected by default
Mitigation
24 System setup options
NOTE: To upgrade or downgrade TPM1.2/2.0, download the TPM wrapper tool (software).
NOTE: The Activate and Disable options will permanently activate or disable the feature and no
further changes will be allowed