FlexATX-KBL-S-C236 – Rev. 1.1
www.kontron.com
// 84
8.4.
Security Setup Menu
The Security Setup menu provides information about the passwords and functions for specifying the security
settings. The passwords are case-sensitive.
Table 14: Security Setup Menu Functions
Function
Description
Administrator Password
Set Administrator Password
User Password
Set user password
Trusted
Computing
Security Device Support
Enable/Disable BIOS support for
security device
SHA-1 PCR Bank
Enable or Disable SHA-1 PCR Bank
SHA 256 PCR Bank
Enable or Disable SHA-256 PCR Bank
Pending Operation
Schedule operation for the security
device
Platform Hierarchy
Enable or Disable Platform Hierarchy
Storage Hierarchy
Enable or Disable Storage Hierarchy
Endorsement Hierarchy
Enable or Disable Endorsement
Hierarchy
TPM2.0 UEFI Spec Version
Select TCG2 Spec Version support
Physical Presence Spec Version
Select PPI Spec
Device Select
Select TPM Device 1.2 or 2.0 or Auto
Select
Intel® BIOS Guard
Technology
Intel BIOS Guard Support
Enable or Disable Intel BIOS Guard
Support
Intel TXT
Information
Display Intel TXT Information (Chipset, BiosScm, Chipset Txt, Cpu Txt, Error Code, Class Code,
Major Code and Minor Code)
Secure Boot
System Mode
Display System Mode
Secure Boot
Display Secure Boot Active / Not Active
Vendor Keys
Display Vendor Keys Active / Not
Active
Attempt Secure Boot
Secure Boot Activated when Platform
Keys (PK) is enrolled, system mode is
user/deployed, and CSM function is
disable
Secure Boot Mode
Secure Boot mode selector:
Standard/Custom.
In Custom mode secure boot variables
can be configured without
authentication
Key
Management
Provision Factory Defaults
Allow to provision factory default
secure boot keys when system is in
setup mode
Install Factory Default Keys
Force system to user mode – install
