Table of Contents
Advertisement
Table 41. System Setup options—Security menu (continued)
Security
Clear
Physical Presence Interface (PPI) Bypass
for Clear Commands
Intel Total Memory Encryption
Chassis Intrusion
Chassis Intrusion
Block Boot Until Cleared
SMM Security Mitigation
By default, the SHA-256 option is enabled.
For additional security, Dell Technologies recommends keeping the SHA-256
option enabled.
NOTE:
To view this option, enable Service options as described in
Service
options.
When enabled, the Clear option clears information that is stored in the TPM
after exiting the system's BIOS. This option returns to the disabled state when
the computer restarts.
By default, the Clear option is disabled.
Dell Technologies recommends enabling the Clear option only when TPM data is
required to be cleared.
NOTE:
To view this option, enable Advanced Setup mode as described in
View Advanced Setup
The PPI Bypass for Clear Commands option allows the operating system to
manage certain aspects of PTT. When enabled, you are not prompted to confirm
changes to the PTT configuration.
By default, the PPI Bypass for Clear Commands option is disabled.
For additional security, Dell Technologies recommends keeping the PPI Bypass
for Clear Commands option disabled.
Enables or disables the processor's memory encryption feature.
By default, the Intel Total Memory Encryption option is disabled.
NOTE:
To view this option, enable Advanced Setup mode as described in
View Advanced Setup
Enables or disables the detection of chassis intrusion events. This feature notifies
the user when the base cover has been removed from the computer.
When set to Enabled, a notification is displayed on the next boot and the event
is logged in the BIOS Events log.
When set to Disabled, no notification is displayed and no event is logged in the
BIOS Events log.
When set to On-Silent, the event is logged in the BIOS Events log, but no
notification is displayed.
By default, the Chassis Intrusion Detection option is disabled.
For additional security, Dell Technologies recommends keeping the Chassis
Intrusion option enabled.
NOTE:
To view this option, enable Advanced Setup mode as described in
View Advanced Setup
The Block Boot Until Clear option is enabled when Chassis Intrusion is
enabled. When enabled, the computer does not boot until the chassis intrusion is
cleared.
NOTE:
To view this option, enable Advanced Setup mode as described in
View Advanced Setup
Enables or disables additional UEFI SMM Security Mitigation protections. This
option uses the Windows SMM Security Mitigations Table (WSMT) to confirm to
the operating system that security best practices have been implemented by the
UEFI firmware.
options.
options.
options.
options.
View
BIOS Setup
111
Advertisement
Table of Contents
