Dell Latitude 5550 Owners Manual - Page 152

Table 49. System Setup options-Security menu continued, PPI Bypass for Clear Command

Get Dell Latitude 5550 PDF manuals and user guides View all Dell Latitude 5550 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 152 highlights

Table 49. System Setup options-Security menu (continued) Security NOTE: To view this option, enable Advanced Setup mode as described in View Advanced Setup options. Attestation Enable The Attestation Enable option controls the endorsement hierarchy of TPM. Disabling the Attestation Enable option prevents TPM from being used to digitally sign certificates. By default, the Attestation Enable option is enabled. For additional security, Dell Technologies recommends keeping the Attestation Enable option enabled. NOTE: When disabled, this feature may cause compatibility issues or loss of functionality in some operating systems. NOTE: To view this option, enable Advanced Setup mode as described in View Advanced Setup options. Key Storage Enable The Key Storage Enable option controls the storage hierarchy of TPM, which is used to store digital keys. Disabling the Key Storage Enable option restricts the ability of TPM to store owner's data. By default, the Key Storage Enable option is enabled. For additional security, Dell Technologies recommends keeping the Key Storage Enable option enabled. NOTE: When disabled, this feature may cause compatibility issues or loss of functionality in some operating systems. NOTE: To view this option, enable Service options as described in View Service options. SHA-256 Allows you to control the usage of SHA-256 by TPM. When enabled, the BIOS and TPM use the SHA-256 hash algorithm to extend measurements into the TPM PCRs during BIOS boot. When disabled, the BIOS and TPM use the SHA-1 hash algorithm to extend measurements into the TPM PCRs during BIOS boot. By default, the SHA-256 option is enabled. For additional security, Dell Technologies recommends keeping the SHA-256 option enabled. NOTE: To view this option, enable Service options as described in View Service options. Clear When enabled, the Clear option clears information that is stored in the TPM after exiting the system's BIOS. This option returns to the disabled state when the computer restarts. By default, the Clear option is disabled. Dell Technologies recommends enabling the Clear option only when TPM data is required to be cleared. NOTE: To view this option, enable Advanced Setup mode as described in View Advanced Setup options. Physical Presence Interface (PPI) Bypass for Clear Command The PPI Bypass for Clear Command option allows the operating system to manage certain aspects of PTT. When enabled, you are not prompted to confirm changes to the PTT configuration. By default, the PPI Bypass for Clear Command option is disabled. For additional security, Dell Technologies recommends keeping the PPI Bypass for Clear Command option disabled. Intel Total Memory Encryption 152 BIOS Setup

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
Table 49. System Setup options—Security menu (continued)
Security
NOTE:
To view this option, enable
Advanced Setup
mode as described in
View Advanced Setup options
.
Attestation Enable
The
Attestation Enable
option controls the endorsement hierarchy of TPM.
Disabling the
Attestation Enable
option prevents TPM from being used to
digitally sign certificates.
By default, the
Attestation Enable
option is enabled.
For additional security, Dell Technologies recommends keeping the
Attestation
Enable
option enabled.
NOTE:
When disabled, this feature may cause compatibility issues or loss of
functionality in some operating systems.
NOTE:
To view this option, enable
Advanced Setup
mode as described in
View Advanced Setup options
.
Key Storage Enable
The
Key Storage Enable
option controls the storage hierarchy of TPM, which is
used to store digital keys. Disabling the
Key Storage Enable
option restricts the
ability of TPM to store owner's data.
By default, the
Key Storage Enable
option is enabled.
For additional security, Dell Technologies recommends keeping the
Key Storage
Enable
option enabled.
NOTE:
When disabled, this feature may cause compatibility issues or loss of
functionality in some operating systems.
NOTE:
To view this option, enable
Service
options as described in
View
Service options
.
SHA-256
Allows you to control the usage of SHA-256 by TPM. When enabled, the BIOS
and TPM use the SHA-256 hash algorithm to extend measurements into the
TPM PCRs during BIOS boot. When disabled, the BIOS and TPM use the SHA-1
hash algorithm to extend measurements into the TPM PCRs during BIOS boot.
By default, the
SHA-256
option is enabled.
For additional security, Dell Technologies recommends keeping the
SHA-256
option enabled.
NOTE:
To view this option, enable
Service
options as described in
View
Service options
.
Clear
When enabled, the
Clear
option clears information that is stored in the TPM
after exiting the system's BIOS. This option returns to the disabled state when
the computer restarts.
By default, the
Clear
option is disabled.
Dell Technologies recommends enabling the
Clear
option only when TPM data is
required to be cleared.
NOTE:
To view this option, enable
Advanced Setup
mode as described in
View Advanced Setup options
.
Physical Presence Interface (PPI) Bypass
for Clear Command
The PPI Bypass for Clear Command option allows the operating system to
manage certain aspects of PTT. When enabled, you are not prompted to confirm
changes to the PTT configuration.
By default, the
PPI Bypass for Clear Command
option is disabled.
For additional security, Dell Technologies recommends keeping the
PPI Bypass
for Clear Command
option disabled.
Intel Total Memory Encryption
152
BIOS Setup