Dell XPS 17 9720 Service Manual - Page 55

Power, Intel Speed Shift Technology, Security, TPM 2.0 Security On, Intel Software Guard Extensions

Page 55 highlights

Table 10. System setup options-Power menu (continued) Power Default: ON Intel Speed Shift Technology Enables or disables the Intel Speed Shift Technology support. Setting this option to enable allows the operating system to select the appropriate processor performance automatically. Default: ON Table 11. System setup options-Security menu Security TPM 2.0 Security On Select whether or not the Trusted Platform Model (TPM) is visible to the OS. Default: ON PPI Bypass for Enable Commands Enables or disables the OS to skip BIOS Physical Presence Interface (PPI) user prompts when issuing TPM PPI enabled and activate commands. Default: OFF PPI Bypass for Disable Commands Enables or disables The OS to skip BIOS PPI user prompts when issuing TPM PPI Disable and Deactivate commands. Default: OFF PPI Bypass for Clear Commands Enables or disables the operating system to skip BIOS Physical Presence Interface (PPI) user prompts when issuing the Clear command. Default: OFF Attestation Enable Enables to control whether the TPM Endorsement Hierarchy is available to the OS. Disabling this setting restricts the ability to use the TPM for signature operations. Default: ON Key Storage Enable Enables to control whether the TPM Endorsement Hierarchy is available to the OS. Disabling this setting restricts the ability to use the TPM for storing owner data. Default: ON SHA-256 Enables or disables the BIOS and the TPM to use the SHA-256 hash algorithm to extend measurements into the TPM PCRs during BIOS boot. Default: ON Clear Enables or disables the computer to clear the PTT owner information, and returns the PTT to the default state. Default: OFF TPM State Enables or disables the TPM. This is the normal operating state for the TPM when you want to use its complete array of capabilities. Default: Enabled Intel Software Guard Extensions Intel SGX Enables or disables the Intel Software Guard Extensions (SGX) to provide a secured environment for running code/storing sensitive information. By default, Software Control is selected. SMM Security Mitigation SMM Security Mitigation Enables or disables additional UEFI SMM Security Mitigation protections. Default: OFF BIOS setup 55

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71

Table 10. System setup options—Power menu (continued)
Power
Default: ON
Intel Speed Shift Technology
Enables or disables the Intel Speed Shift Technology support. Setting this
option to enable allows the operating system to select the appropriate
processor performance automatically.
Default: ON
Table 11. System setup options—Security menu
Security
TPM 2.0 Security On
Select whether or not the Trusted Platform Model (TPM) is visible to the OS.
Default: ON
PPI Bypass for Enable Commands
Enables or disables the OS to skip BIOS Physical Presence Interface (PPI) user
prompts when issuing TPM PPI enabled and activate commands.
Default: OFF
PPI Bypass for Disable Commands
Enables or disables The OS to skip BIOS PPI user prompts when issuing TPM
PPI Disable and Deactivate commands.
Default: OFF
PPI Bypass for Clear Commands
Enables or disables the operating system to skip BIOS Physical Presence
Interface (PPI) user prompts when issuing the Clear command.
Default: OFF
Attestation Enable
Enables to control whether the TPM Endorsement Hierarchy is available to the
OS. Disabling this setting restricts the ability to use the TPM for signature
operations.
Default: ON
Key Storage Enable
Enables to control whether the TPM Endorsement Hierarchy is available to the
OS. Disabling this setting restricts the ability to use the TPM for storing owner
data.
Default: ON
SHA-256
Enables or disables the BIOS and the TPM to use the SHA-256 hash algorithm
to extend measurements into the TPM PCRs during BIOS boot.
Default: ON
Clear
Enables or disables the computer to clear the PTT owner information, and
returns the PTT to the default state.
Default: OFF
TPM State
Enables or disables the TPM. This is the normal operating state for the TPM
when you want to use its complete array of capabilities.
Default: Enabled
Intel Software Guard Extensions
Intel SGX
Enables or disables the Intel Software Guard Extensions (SGX) to provide a
secured environment for running code/storing sensitive information.
By default, Software Control is selected.
SMM Security Mitigation
SMM Security Mitigation
Enables or disables additional UEFI SMM Security Mitigation protections.
Default: OFF
BIOS setup
55