Dell EMC PowerEdge MX740c Reference Manual page 22

Option Description
TPM Advanced This setting is enabled only when TPM Security is set to ON.
Settings
Intel(R) TXT Enables or disables the Intel Trusted Execution Technology (TXT) option. To enable the Intel TXT option,
virtualization technology and TPM Security must be enabled with Pre-boot measurements. This option is
set to Off by default.
When TPM 2.0 is installed, TPM 2 Algorithm option is available. It enables you to select a hash algorithm
from those supported by the TPM (SHA1, SHA256). TPM 2 Algorithm option must be set to SHA256,
to enable TXT.
Power Button Enables or disables the power button on the front of the system. This option is set to Enabled by default.
AC Power Sets how the system behaves after AC power is restored to the system. This option is set to Last by
Recovery default.
UEFI Variable Provides varying degrees of securing UEFI variables. When set to Standard (the default), UEFI variables
Access are accessible in the operating system per the UEFI specification. When set to Controlled, selected UEFI
variables are protected in the environment and new UEFI boot entries are forced to be at the end of the
current boot order.
In-Band When set to Disabled, this setting will hide the Management Engine's (ME), HECI devices, and the
Manageability system's IPMI devices from the operating system. This prevents the operating system from changing the
Interface ME power capping settings, and blocks access to all in-band management tools. All management should
be managed through out-of-band. This option is set to Enabled by default.
Secure Boot Enables Secure Boot, where the BIOS authenticates each pre-boot image by using the certificates in the
Secure Boot Policy. Secure Boot is set to Disabled by default.
Secure Boot When Secure Boot policy is set to Standard, the BIOS uses the system manufacturer's key and
Policy certificates to authenticate pre-boot images. When Secure Boot policy is set to Custom, the BIOS uses
the user-defined key and certificates. Secure Boot policy is set to Standard by default.
22 Pre-operating system management applications
Table 3. TPM 2.0 security information (continued)
TPM information Description
TPM Hierarcy
Enable, disable, or clear the storage and endorsement hierarchies. When set to
Enabled, the storage and endorsement hierarchies can be used.
When set to Disabled, the storage and endorsement hierarchies cannot be
used.
When set to Clear, the storage and endorsement hierarchies are cleared of any
values, and then reset to Enabled.
Table 4. TPM Advanced Settings Details
Option
TPM PPI Bypass Provision
TPM PPI Bypass Clear
NOTE: BIOS update requires HECI devices to be operational and DUP updates require IPMI interface
to be operational. This setting needs to be set to Enabled to avoid updating errors.
Description
When set to Enabled allows the Operating
System to bypass Physical Presence Interface
(PPI), prompts when issuing PPI Advanced
Configuration and Power Interface (ACPI)
provisioning operations. This option is set to
Disabled by default.
When set to Enabled allows the Operating
System to bypass Physical Presence Interface
(PPI), prompts when issuing PPI Advanced
Configuration and Power Interface (ACPI)
provisioning operations. This option is set to
Disabled by default.