Table 4. Security (continued)
Option
Description
NOTE:
The system will always prompt for the system and
internal HDD passwords when powered on from the off
state (a cold boot). Also, the system will always prompt
for passwords on any module bay HDDs that may be
present.
Password Change
This option lets you determine whether changes to the
System and Hard Disk passwords are permitted when an
administrator password is set.
Allow Non-Admin Password Changes
- This option is
enabled by default.
UEFI Capsule Firmware Updates
This option controls whether this system allows BIOS updates
via UEFI capsule update packages. This option is selected by
default. Disabling this option will block BIOS updates from
services such as Microsoft Windows Update and Linux Vendor
Firmware Service (LVFS)
TPM 2.0 Security
Allows you to control whether the Trusted Platform Module
(TPM) is visible to the operating system.
●
TPM On (default)
●
Clear
●
PPI Bypass for Enable Commands
●
PPI Bypass for Disable Commands
●
Attestation Enable (default)
●
Key Storage Enable(default)
●
SHA-256(default)
●
Disabled
●
Enabled (default)
Computrace
This field lets you Activate or Disable the BIOS module
interface of the optional Computrace Service from Absolute
Software. Enables or disables the optional Computrace service
designed for asset management.
●
Deactivate
- This option is selected by default.
●
Disable
●
Activate
Chassis Intrusion
Allows you to control the chassis intrusion feature. You can
set this option to:
●
Enabled
●
Disabled (default)
●
On-Silent
CPU XD Support
Allows you to enable or disable the Execute Disable mode of
the processor. This option is enabled by default.
OROM Keyboard Access
This option determines whether users are able to enter
Option ROM Configuration screens via hotkeys during boot.
Specifically, these settings are capable of preventing access
to Intel RAID (CTRL+I) or Intel Management Engine BIOS
Extension (CTRL+P/F12).
●
Enable (selected by default)— User may enter OROM
configuration screens via the hotkey.
●
One-Time Enable — User may enter OROM configuration
screens via the hotkeys on next boot only. After next boot,
the setting will revert to disabled.
●
Disable — User may not enter OROM configuration
screens via the hotkey.
System setup
69
