Table 32. System setup options—Security menu (continued)
Security
PPI Bypass for Clear Commands
Clear
Intel SGX
SMM Security Mitigation
Enable Strong Passwords
Password Configuration
Admin Password
System Password
Enable Master Password Lockout
Table 33. System setup options—Secure Boot menu
Secure Boot
Enable Secure Boot
Secure Boot Mode
Table 34. System setup options—Expert Key Management menu
Expert Key Management
Enable Custom Mode
Custom Mode Key Management
34
System-Setup
Default: ON.
Enables or disables the operating system to skip BIOS Physical Presence Interface
(PPI) user prompts when issuing the Clear command.
Default: OFF.
Enables or disables the computer to clear the PTT owner information, and returns
the PTT to the default state.
Default: OFF.
Enables or disables the Intel Software Guard Extensions (SGX) to provide a secured
environment for running code/storing sensitive information.
Default: Software Control
Enables or disables additional UEFI SMM Security Mitigation protections.
Default: OFF.
NOTE:
This feature may cause compatibility issues or loss of
functionality with some legacy tools and applications.
Enables or disables strong passwords.
Default: OFF.
Control the minimum and maximum number of characters that are allowed for Admin
and System passwords.
Sets, Changes, or deletes the administrator (admin) password (sometimes called the
"setup" password).
Sets, Changes, or deletes the system password.
Enables or disables the master password support.
Default: OFF.
Enables or disables the computer to boos using only validated boot software.
Default: OFF.
NOTE:
For Secure Boot to be enabled, the computer needs to be in UEFI
boot mode and the Enable Legacy Option ROMs option needs to be
turned off.
Selects the Secure Boot operation mode.
Default: Deployed Mode.
NOTE:
Deployed Mode should be selected for normal operation of Secure
Boot.
Enables or disables the keys in the PK, KEK, db, and dbx security key databases to be
modified.
Default: OFF.
Selects the custom values for expert key management.