HP EliteDesk 800 G8 TamperLock User Guide - Page 9

TamperLock policy settings continued, Settings, Description, Default, HP Recommended, All PCIe devices

Page 9 highlights

Table 4-1 TamperLock policy settings (continued) Settings Description Default protection is enabled in BIOS preboot environment for Thunderbolt-attached PCI-e devices. All PCIe devices-Input-Output Memory Management Unit (IOMMU) hardware-based DMA protection is enabled in BIOS preboot environment for all internal and external PCIattached devices. DMA Protection Disabled-BIOS will not configure Input-Output Memory Management Unit (IOMMU) hardware for use by operating systems that support DMA protection. Enabled-BIOS will configure Input-Output Memory Management Unit (IOMMU) hardware for use by operating systems that support DMA protection. Enabled HP Recommended Enabled 5

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10

Table 4-1
TamperLock policy settings (continued)
Settings
Description
Default
HP Recommended
protection is enabled in BIOS preboot
environment for Thunderbolt-attached PCI-e
devices.
All PCIe devices
—Input-Output Memory
Management Unit (IOMMU) hardware-based DMA
protection is enabled in BIOS preboot
environment for all internal and external PCI-
attached devices.
DMA Protection
Disabled
—BIOS will not configure Input-Output
Memory Management Unit (IOMMU) hardware for
use by operating systems that support DMA
protection.
Enabled
—BIOS will configure Input-Output
Memory Management Unit (IOMMU) hardware for
use by operating systems that support DMA
protection.
Enabled
Enabled
5