Table of Contents
Advertisement
Trust Domain Extension (TDX) (Available when your CPU supports Intel TDX)
Use this feature to enable Intel Trust Domain Extension (TDX) technology support to enhance
control of data security. The options are Disabled and Enabled.
TDX Secure Arbitration Mode Loader (SEAM Loader) (Available when your CPU
supports Intel TDX)
The SEAM Loader (SEAMLDR) is used to load and update Intel TDX modules into the SEAM
memory range by verifying the digital signature. The options are Disabled and Enabled.
Disable Excluding Mem Below 1MB in CMR (Available when "Memory Encryption
(TME)" is set to Enabled and when "Trust Domain Extension (TDX)" is set to
Enabled)
Use this feature to enable/disable TDX Excluding CMR below 1MB. The options are Disabled,
Enabled, and Auto.
TME-MT/TDX Key Split (Available when "Memory Encryption (TME)" is set to
Enabled and when "Trust Domain Extension (TDX)" is set to Enabled)
Use this feature to set the number of bits for TDX. The other bits will be used by TME-MT.
The default setting is 1.
TME-MT: (Available when "Memory Encryption (TME)" is set to Enabled and when "Trust
Domain Extension (TDX)" is set to Enabled)
This feature displays the number of keys designated for TME-MT.
TDX Keys: (Available when "Memory Encryption (TME)" is set to Enabled and when
"Trust Domain Extension (TDX)" is set to Enabled)
This feature displays the number of keys designated for TDX.
----------------------------------------------------------------
Software Guard Extension (SGX)
----------------------------------------------------------------
*The following SGX features are available when "Memory Encryption (TME)" is set
to Enabled and when your CPU supports Intel SGX.
Note: Each memory channel must have at least one DIMM populated on the mother-
board to support the Intel SGX features.
SGX Factory Reset
Use this feature to perform an SGX factory reset to delete all registration data and force an
Initial Platform Establishment flow. Reboot the system for the changes to take effect. The
options are Disabled and Enabled.
109
Chapter 4: UEFI BIOS
Advertisement
Table of Contents
