Dell P103G002 Service Manual page 43

Table 7. System setup options—Security menu (continued)
Security
Attestation Enables
Key Storage Enable
SHA-256
Clear
TPM State
Intel SGX
SMM Security Mitigation
Enable Strong Passwords
Password Configuration
Admin Password
System Password
Enable Master Password Lockout
Table 8. System setup options—Secure Boot menu
Secure Boot
Enable Secure Boot
Secure Boot Mode
Default: OFF.
Enables to control whether the TPM Endorsement Hierarchy is available to the
OS. Disabling this setting restricts the ability to use the TPM for signature
operations.
Default: ON.
Enables to control whether the TPM Endorsement Hierarchy is available to the
OS. Disabling this setting restricts the ability to use the TPM for storing owner
data.
Default: ON.
Enables or disables the BIOS and the TPM to use the SHA-256 hash algorithm
to extend measurements into the TPM PCRs during BIOS boot.
Default: ON.
Enables or disables the computer to clear the PTT owner information, and
returns the PTT to the default state.
Default: OFF.
Enables or disables the TPM. This is the normal operating state for the TPM
when you want to use its complete array of capabilities.
Default: Enabled.
Enables or disables the Intel Software Guard Extensions (SGX) to provide a
secured environment for running code/storing sensitive information.
Default: Software Control
Enables or disables additional UEFI SMM Security Mitigation protections.
Default: OFF.
NOTE: This feature may cause compatibility issues or loss of functionality
with some legacy tools and applications.
Enables or disables strong passwords.
Default: OFF.
Control the minimum and maximum number of characters that are allowed for
Admin and System passwords.
Sets, Changes, or deletes the administrator (admin) password (sometimes
called the "setup" password).
Sets, Changes, or deletes the system password.
Enables or disables the master password support.
Default: OFF.
Enables or disables the computer to boos using only validated boot software.
Default: OFF.
NOTE: For Secure Boot to be enabled, the computer needs to be in UEFI
boot mode and the Enable Legacy Option ROMs option needs to be turned
off.
Selects the Secure Boot operation mode.
System setup 43