Dell EMC Inspiron 3671, Service Manual

Page: 63 / 73

Security
By default, PTT On is not selected.
Absolute(R) Enable or disable the BIOS module interface of the optional Absolute Persistence
Module Service from Absolute Software.
• Enabled (default)
• Disabled
• Permanently Disabled
Admin Setup Lockout Enable to prevent users from entering Setup when an Admin Password is set.
By default, Enable Admin Setup Lockout is not selected.
Master Password Lockout When enabled, this option disables the master password support.
By default, Enable Master Password Lockout is not selected.
SIMM Security Mitigation Allows you to enable or disable the additional UEFI SIMM Security Mitigation
protections.
By default, SMM Security Mitigation is not selected.
Table 7. System setup options—Secure Boot menu
Secure Boot
Secure Boot Enable Enable or disable the secure boot feature.
By default, Secure Boot Enable is not selected.
Secure Boot Mode Set the Secure Boot Mode to allow evaluation or enforcement of UEFI driver
signatures.
• Deployed Mode (default)
• Audit Mode
Expert Key Management Allows you to manipulate the security key databases only if the computer is in Custom
Mode.
By default, Enable Custom Mode is selected.
If Enable Custom Mode is selected, the options are:
• PK (default)
• KEK
• db
• dbx
After selecting an option, the subsequent actions are:
• Save to File —Saves the key to a user-selected file.
• Replace from File —Replaces the current key with a key from a user-selected
file.
• Append from File —Adds a key to the current database from a user-selected file
• Delete —Deletes the selected key
Table 8. System setup options—Intel Software Guard Extensions menu
Intel Software Guard Extensions
Intel SGX Enable Enable or disable Intel Software Guard Extensions that provides a secure
environment for running code or storing sensitive information in the context of the
main OS. The options are:
• Disabled
• Enabled
• Software Controlled (default)
System setup 63