Dell OptiPlex 7071 Tower Tower Service Manual - Page 73

Security

Page 73 highlights

Option Description • Intel HD Graphics NOTE: If you do not select Auto, the on-board graphics device will be present and enabled. Security Table 6. Security Option Admin Password System Password Internal HDD-0 Password Strong Password Password Configuration Password Bypass Description Allows you to set, change, and delete the admin password. Allows you to set, change, and delete the system password. Allows you to set, change, and delete the computer internal hard drive. This option lets you enable or disable strong password for the system. The option is disabled by default. Allows you to control the minimum and maximum number of characters that are enabled for an administrative password and the system password. The range of characters is 4-32. This option enables you to bypass the System (Boot) password and the internal hard drive password prompts during a system restart. • Disabled-Always prompt for the system and internal hard drive password when they are set. This option is enabled by default. • Reboot Bypass-Bypass the password prompts on restarts (warm boots). NOTE: The system always prompts for the system and internal hard drive passwords when powered on from the off state (a cold boot). Also, the system prompts for passwords on any module bay HDDs that may be present. Password Change This option lets you determine whether changes to the System and Hard Disk passwords are permitted when an administrator password is set. Allow Non-Admin Password Changes - This option is enabled by default. UEFI Capsule Firmware Updates TPM 2.0 Security This option controls whether this system enables BIOS updates through UEFI capsule update packages. This option is enabled by default. Disabling this option blocks BIOS updates from services such as Microsoft Windows Update and Linux Vendor Firmware Service (LVFS) Allows you to control whether the Trusted Platform Module (TPM) is visible to the operating system. • TPM On-enabled by default • Clear • PPI Bypass for Enable Commands • PPI Bypass for Disable Commands • PPI Bypass for Clear Commands • Attestation Enable-enabled by default • Key Storage Enable-enabled by default • SHA-256-enabled by default The options are: • Disabled • Enabled-enabled by default Absolute This field enables you to enable, disable, or permanently disable the BIOS module interface of the optional Absolute Persistence Module service from Absolute Software. • Enabled-enabled by default • Disabled System setup 73

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96

Option
Description
Intel HD Graphics
NOTE:
If you do not select Auto, the on-board graphics device will be present and
enabled.
Security
Table 6. Security
Option
Description
Admin Password
Allows you to set, change, and delete the admin password.
System Password
Allows you to set, change, and delete the system password.
Internal HDD-0 Password
Allows you to set, change, and delete the computer internal hard drive.
Strong Password
This option lets you enable or disable strong password for the system. The option is disabled by
default.
Password Configuration
Allows you to control the minimum and maximum number of characters that are enabled for an
administrative password and the system password. The range of characters is 4–32.
Password Bypass
This option enables you to bypass the System (Boot) password and the internal hard drive password
prompts during a system restart.
Disabled
—Always prompt for the system and internal hard drive password when they are set.
This option is enabled by default.
Reboot Bypass—Bypass the password prompts on restarts (warm boots).
NOTE:
The system always prompts for the system and internal hard drive passwords
when powered on from the off state (a cold boot). Also, the system prompts for
passwords on any module bay HDDs that may be present.
Password Change
This option lets you determine whether changes to the System and Hard Disk passwords are
permitted when an administrator password is set.
Allow Non-Admin Password Changes
- This option is enabled by default.
UEFI Capsule Firmware Updates
This option controls whether this system enables BIOS updates through UEFI capsule update
packages. This option is enabled by default. Disabling this option blocks BIOS updates from services
such as Microsoft Windows Update and Linux Vendor Firmware Service (LVFS)
TPM 2.0 Security
Allows you to control whether the Trusted Platform Module (TPM) is visible to the operating
system.
TPM On—enabled by default
Clear
PPI Bypass for Enable Commands
PPI Bypass for Disable Commands
PPI Bypass for Clear Commands
Attestation Enable—enabled by default
Key Storage Enable—enabled by default
SHA-256—enabled by default
The options are:
Disabled
Enabled—enabled by default
Absolute
This field enables you to enable, disable, or permanently disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute Software.
Enabled—enabled by default
Disabled
System setup
73