Dell Vostro 5301 Setup and Specifications - Page 24

Table 30. System setup options-Expert Key Management menu, Security, Intel SGX

Page 24 highlights

Table 28. System setup options-Security menu (continued) Security PPI Bypass for Clear Commands Enables or disables the operating system to skip BIOS Physical Presence Interface (PPI) user prompts when issuing the Clear command. Default: OFF. Clear Enables or disables the computer to clear the PTT owner information, and returns the PTT to the default state. Default: OFF. Intel SGX Enables or disables the Intel Software Guard Extensions (SGX) to provide a secured environment for running code/storing sensitive information. Default: Software Control SMM Security Mitigation Enables or disables additional UEFI SMM Security Mitigation protections. Default: OFF. NOTE: This feature may cause compatibility issues or loss of functionality with some legacy tools and applications. Enable Strong Passwords Enables or disables strong passwords. Default: OFF. Password Configuration Admin Password System Password Enable Master Password Lockout Control the minimum and maximum number of characters that are allowed for Admin and System passwords. Sets, Changes, or deletes the administrator (admin) password (sometimes called the "setup" password). Sets, Changes, or deletes the system password. Enables or disables the master password support. Default: OFF. Table 29. System setup options-Secure Boot menu Secure Boot Enable Secure Boot Enables or disables the computer to boos using only validated boot software. Default: OFF. NOTE: For Secure Boot to be enabled, the computer needs to be in UEFI boot mode and the Enable Legacy Option ROMs option needs to be turned off. Secure Boot Mode Selects the Secure Boot operation mode. Default: Deployed Mode. NOTE: Deployed Mode should be selected for normal operation of Secure Boot. Table 30. System setup options-Expert Key Management menu Expert Key Management Enable Custom Mode Enables or disables the keys in the PK, KEK, db, and dbx security key databases to be modified. Default: OFF. Custom Mode Key Management Selects the custom values for expert key management. Default: PK. 24 System setup

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49

Table 28. System setup options—Security menu (continued)
Security
PPI Bypass for Clear Commands
Enables or disables the operating system to skip BIOS Physical Presence
Interface (PPI) user prompts when issuing the Clear command.
Default: OFF.
Clear
Enables or disables the computer to clear the PTT owner information, and
returns the PTT to the default state.
Default: OFF.
Intel SGX
Enables or disables the Intel Software Guard Extensions (SGX) to provide a
secured environment for running code/storing sensitive information.
Default: Software Control
SMM Security Mitigation
Enables or disables additional UEFI SMM Security Mitigation protections.
Default: OFF.
NOTE:
This feature may cause compatibility issues or loss of functionality
with some legacy tools and applications.
Enable Strong Passwords
Enables or disables strong passwords.
Default: OFF.
Password Configuration
Control the minimum and maximum number of characters that are allowed for
Admin and System passwords.
Admin Password
Sets, Changes, or deletes the administrator (admin) password (sometimes
called the "setup" password).
System Password
Sets, Changes, or deletes the system password.
Enable Master Password Lockout
Enables or disables the master password support.
Default: OFF.
Table 29. System setup options—Secure Boot menu
Secure Boot
Enable Secure Boot
Enables or disables the computer to boos using only validated boot software.
Default: OFF.
NOTE:
For Secure Boot to be enabled, the computer needs to be in UEFI
boot mode and the Enable Legacy Option ROMs option needs to be turned
off.
Secure Boot Mode
Selects the Secure Boot operation mode.
Default: Deployed Mode.
NOTE:
Deployed Mode should be selected for normal operation of Secure
Boot.
Table 30. System setup options—Expert Key Management menu
Expert Key Management
Enable Custom Mode
Enables or disables the keys in the PK, KEK, db, and dbx security key databases
to be modified.
Default: OFF.
Custom Mode Key Management
Selects the custom values for expert key management.
Default: PK.
24
System setup