Dell Latitude 3120, Руководство по обслуживанию

Страница: 71 / 90

Table 5. Security (continued)
Option Description
UEFI Capsule Firmware
Updates This option controls whether this system allows BIOS updates via UEFI capsule update
packages. The
Enable UEFI Capsule Firmware Updates option is selected by default.
NOTE: Disabling this option will block BIOS updates from services such as Microsoft
Windows Update and Linux Vendor Firmware Service (LVFS)
PTT Security ● PTT On (enabled by default) — This option allows you to control whether the Platform
Trust technology (PTT) is visible to the operating system.
NOTE: Disabling this option does not change any settings you have made to the PTT,
nor does it delete or change any information or keys you may have stored in the PTT.
Changes to this setting take effect immediately.
● Clear — This setting clears the PTT owner information, and returns the PTT to the
default state. Changes to this setting will be latched in BIOS after checking "apply", but
will not take effect in the PTT until after exiting the BIOS setup menu.
● PPI Bypass for Clear Commands — This option controls the PTT Physical Presence
Interface (PPI). When enabled, this setting will allow the OS to skip BIOS PPI
user prompts when issuing the Clear command. Changes to this setting take effect
immediately.
Absolute This field lets you Enable, Disable or Permanently Disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute Software.
● Enabled (enabled by default) — Enable the Absolute Persistence and load the firmware
Persistence Module.
● Disabled — Disable Absolute Persistence. The firmware Persistence Module is not
installed.
● Permanently Disabled — Permanently disables Absolute Persistence module interface
from farther use.
WARNING: The Permanently Disabled option can only be selected once. When
Permanently Disabled is selected, Absolute Persistence cannot be re-enabled.
No further changes to the Enabled/Disabled state are allowed.
Admin Setup Lockout Allows you to prevent users from entering Setup when an Admin password is set. This option
is not set by default.
Master Password Lockout Allows you to disable master password support. Hard Disk passwords need to be cleared
before the settings can be changed. This option is not set by default.
SMM Security Mitigation Allows you to enable or disable additional UEFI SMM Security Mitigation protections. This
option is not set by default.
Secure boot
Table 6. Secure Boot
Option Description
Secure Boot Enable Allows you to enable or disable the Secure Boot feature. The Secure Boot Enable option
is enabled by default.
Secure Boot Mode Allows you to modify the behavior of Secure Boot to allow evaluation or enforcement of
UEFI driver signatures.
● Deployed Mode (enabled by default)
● Audit Mode
Expert key Management Allows you to manipulate the security key databases only if the system is in Custom Mode.
The
Enable Custom Mode option is disabled by default. The options for Custom Mode
Key Management are:
● PK (enabled by default)
● KEK
● db
System setup 71