Dell Latitude 5520 Service Manual page 104

Table 12. System setup options—Security menu (continued)
Security
TPM 2.0 Security On
Attestation Enable
Key Storage Enable
SHA-256
Clear
PPI ByPass for Clear Commands
Intel Total Memory Encryption
Total Memory Encryption
Chassis intrusion
SMM Security Mitigation
Data Wipe on Next Boot
Start Data Wipe
Absolute
UEFI Boot Path Security
Table 13. System setup options—Passwords menu
Passwords
Admin Password
System Password
NVMe SSD0
Password Configuration
Upper Case Letter
104 BIOS setup
Enable or disable TPM 2.0 security options.
By default, the TPM 2.0 Security On option is enabled.
Enables to control whether the Trusted Platform Module (TPM) Endorsement
Hierarchy is available to the operating system.
By default, the Attestation Enable option is enabled.
Enables to control whether the Trusted Platform Module (TPM) Storage
Hierarchy is available to the operating system.
By default, the Key Storage Enable option is enabled.
BIOS and the TPM will use the SHA-256 hash algorithm to extend
measurements into the TPM PCRs during BIOS boot.
By default, the SHA-256 option is enabled.
Enables to clear the TPM owner information and returns the TPM to the
default state.
By default, the Clear option is disabled.
Controls the TPM Physical Presence Interface (PPI).
By default, the PPI ByPass for clear Commands option is disabled.
Enable or disable you to protect memory from physical attacks including freeze
spray, probing DDR to read the cycles, and others.
By default, the Total Memory Encryption option is disabled.
Controls the chassis intrusion feature.
By default, the On-Silent option is enabled.
Enable or disable SMM Security Mitigation.
By default, the option is enabled.
Enable or disable the data wipe on next boot.
By default, the option is enabled.
Enable or disable or permanently disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute software.
By default, the option is enabled.
Controls whether or not the computer will prompt the user to enter the admin
password (if set) when booting to a UEFI boot device from the F12 boot menu.
By default, the Always Except Internal HDD option is enabled.
Set, change, or delete the administrator password.
Set, change, or delete the computer password.
Set, change, or delete the NVMe SSD0 password.
Reinforces password must have at least one upper case letter.