Option
Description
•
TPM On (default)
•
Clear
•
PPI Bypass for Enable Commands
•
PPI Bypass for Disable Commands
•
PPI Bypass for Clear Commands
•
Attestation Enable (default)
•
Key Storage Enable (default)
•
SHA-256 (default)
Choose any one option:
•
Disabled
•
Enabled (default)
Absolute
This field lets you Enable, Disable or Permanently Disable the BIOS module interface of the optional
Absolute Persistence Module service from Absolute Software.
•
Enabled
(default)
•
Disabled
•
Permanently Disabled
Chassis Intrusion
This field controls the chassis intrusion feature.
Choose any one of the option:
•
Disabled
(default)
•
Enabled
•
On-Silent
OROM Keyboard Access
•
Disabled
•
Enabled
(default)
•
One Time Enable
Admin Setup Lockout
Allows you to prevent users from entering Setup when Admin password is set. This option is not set
by default.
SMM Security Mitigation
Allows you to enable or disable additional UEFI SMM Security Mitigation protections. This option is
not set by default.
Secure boot options
Table 24. Secure Boot
Option
Description
Secure Boot Enable
Allows you to enable or disable Secure Boot feature
•
Secure Boot Enable
This option is not selected by default.
Secure Boot Mode
Allows you to modify the behavior of Secure Boot to allow evaluation or enforcement of UEFI
driver signatures.
•
Deployed Mode
(default)
24
System setup