Dell Inspiron 14 5435 Owner's Manual page 90

Table 30. System setup options — Security menu (continued)
Security
Password Change
Absolute
Absolute Status
WINDOWS SMM SECURITY MITIGATIONS TABLE
(WSMT)
Firmware TPM
PPI Bypass for Clear Command
Enable Pre-Boot DMA Support
Enable OS Kernel DMA Support
UEFI Firmware Capsule Updates
Secure Boot
Secure Boot
Select Secure Boot
Expert Key Management
Custom Mode
Enable Microsoft UEFI CA
90 BIOS setup
Allows the user to permit or deny system password or hard
disk drive password changes.
By default, the Permitted option is selected.
Allows the user to track the computer
By default, the Absolute is disabled.
Allows the user to activate or deactivate the Absolute
feature Displays if the system password is clear or set.
By default, the Absolute Status is deactivate.
Enables or disables configuration of platform features on
Dell Client Systems with WSMT-enabled BIOS.
By default, the option is enabled.
Enables or disables the firmware TPM.
By default, the option is enabled.
Allows the user to control the TPM Physical Presence
Interface (PPI). When enabled, this setting allows the
operating system to skip BIOS PPI user prompts when
issuing the Clear command. Changes to this setting take
effect immediately.
By default, the option is disabled.
Enables or disables the pre-boot DMA protection for the
internal and external ports.
By default, the option is enabled.
Enables or disables the Kernel DMA protection for the
internal and external ports.
By default, the option is enabled.
Enables or disables BIOS updates through UEFI capsule
update packages.
By default, the option is enabled.
Enables or disables the computer to boot using only
validated boot software.
By default, the option is enabled.
Allows the user to select the Secure Boot operation mode.
By default, the Deployed Mode option is selected.
Enables or disables Expert Key Management feature.
By default, the option is enabled.
Enables or disables the keys in the PK, KEK, db, and dbx
security key databases to be modified.
By default, the option is disabled.
Allows the user to add the Microsoft UEFI CA to the BIOS
UEFI Secure Boot database.
When enabled, the Microsoft UEFI CA is added to the BIOS
UEFI Secure Boot database.