Dell Vostro 5401 Service Manual - Page 103

Password, Table 9. Security continued, Table 10. Security

Page 103 highlights

Table 9. Security (continued) Option Description ● Attestation Enable-This option is enabled by default. ● Key Storage Enable-This option is enabled by default. ● SHA-256-This option is enabled by default. ● Clear ● TPM State-This option is enabled by default. Intel Software Guard Extensions Provides a secure environment for running code or storing sensitive information in the context of the main operating system and sets enclave reserve memory size. Intel SGX The options are: ● Disabled ● Enabled ● Software Control-This option is enabled by default. SMM Security Mitigation Allows you to enable or disable additional UEFI SMM Security Mitigation protection. SMM Security Mitigation - By default, this option is enabled. Data Wipe on Next Boot Allows BIOS to queue up data wipe cycle for storage devices connected to the motherboard on the next reboot. Start Data Wipe - By default, this option is disabled. NOTE: Secure Wipe operation deletes information in a way that it cannot be reconstructed. Absolute This field allows you to Enable, Disable, or Permanently Disable the BIOS module interface of the optional Absolute Persistence Module service from Absolute® Software. The options are: ● Enable Absolute-This option is enabled by default. ● Disable Absolute ● Permanently Disable Absolute UEFI Boot Path Security Controls whether the system prompts the user to enter the admin password (if set) when booting to a UEFI boot path device from the F12 boot menu. The options are: ● Never ● Always ● Always Except Internal HDD-This option is enabled by default. ● Always Except Internal HDD&PXE Password Table 10. Security Option Admin Password Description Allows you to set, change, or delete the administrator (admin) password. The entries to set password are: ● Enter the old password: ● Enter the new password: Press Enter once you enter the new password and again press Enter to confirm the new password. System setup 103

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122

Table 9. Security (continued)
Option
Description
Attestation Enable
—This option is enabled by default.
Key Storage Enable
—This option is enabled by default.
SHA-256
—This option is enabled by default.
Clear
TPM State
—This option is enabled by default.
Intel Software Guard
Extensions
Provides a secure environment for running code or storing sensitive information in the context of
the main operating system and sets enclave reserve memory size.
Intel SGX
The options are:
Disabled
Enabled
Software Control
—This option is enabled by default.
SMM Security
Mitigation
Allows you to enable or disable additional UEFI SMM Security Mitigation protection.
SMM Security Mitigation
- By default, this option is enabled.
Data Wipe on Next Boot
Allows BIOS to queue up data wipe cycle for storage devices connected to the motherboard on
the next reboot.
Start Data Wipe
- By default, this option is disabled.
NOTE:
Secure Wipe operation deletes information in a way that it cannot be reconstructed.
Absolute
This field allows you to Enable, Disable, or Permanently Disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute® Software.
The options are:
Enable Absolute
—This option is enabled by default.
Disable Absolute
Permanently Disable Absolute
UEFI Boot Path Security
Controls whether the system prompts the user to enter the admin password (if set) when
booting to a UEFI boot path device from the F12 boot menu.
The options are:
Never
Always
Always Except Internal HDD
—This option is enabled by default.
Always Except Internal HDD&PXE
Password
Table 10. Security
Option
Description
Admin Password
Allows you to set, change, or delete the administrator (admin) password.
The entries to set password are:
Enter the old password:
Enter the new password:
Press
Enter
once you enter the new password and again press
Enter
to confirm the new
password.
System setup
103