Table of Contents
Advertisement
Chapter 4: UEFI BIOS
Intel Virtualization Technology
Select Enable to enable the Intel Vanderpool Technology for Virtualization platform support,
which will allow multiple operating systems to run simultaneously on the same computer to
maximize system resources for performance enhancement. The options are Disable and
Enable.
Note: Please reboot the system for any change of the setting to take effect.
Enable SMX
Select Enable to support Safer Mode Extensions (SMX) which provides a programming
interface for system software to establish a controlled environment to support the trusted
platform configured by the end user and to verify a virtual machine monitor before it is allowed
to run. The options are Disable and Enable.
PPIN Control
Select Unlock/Enable to use the Protected Processor Inventory Number (PPIN) in the system.
The PPIN is a unique number set for tracking a given Intel Xeon server processor. The options
are Lock/Disable and Unlock/Enable.
AES-NI
Select Enable to use the Intel Advanced Encryption Standard (AES) New Instructions (NI) to
ensure data security. The options are Disable and Enable.
Limit CPU PA to 46 Bits
Select Enable to limit CPU physical address to 46 bits to support the older Hyper-v CPU
platform. The options are Disable and Enable.
----------------------------------------------------------------
TME, TME-MT, TDX
----------------------------------------------------------------
Memory Encryption (TME) (Available when your CPU supports Intel TME)
Select Enabled for Intel Total Memory Encryption (TME) support to enhance memory data
security. The options are Disabled and Enabled.
Total Memory Encryption (TME) Bypass (Available when "Memory Encryption (TME)"
is set to Enabled)
Use this feature to disable/enable the TME function for physical memory protection. The
options are Auto, Disabled, and Enabled.
Total Memory Encryption Multi-Tenant (TME-MT) (Available when "Memory
Encryption (TME)" is set to Enabled and when "Limit CPU PA to 46 Bits" is set to
Disable)
Use this feature to support tenant-provided (SW-provided) keys. The options are Disabled
and Enabled.
103
Advertisement
Table of Contents
