Service Manual

Table 10. System setup options—Security menu (continued)
Security
Attestation Enable Enables to control whether the TPM Endorsement Hierarchy is available to the
OS. Disabling this setting restricts the ability to use the TPM for signature
operations.
Default: ON
Key Storage Enable Enables to control whether the TPM Endorsement Hierarchy is available to the
OS. Disabling this setting restricts the ability to use the TPM for storing owner
data.
Default: ON
SHA-256 Enables or disables the BIOS and the TPM to use the SHA-256 hash algorithm to
extend measurements into the TPM PCRs during BIOS boot.
Default: ON
Clear Enables or disables the computer to clear the PTT owner information, and
returns the PTT to the default state.
Default: OFF
PPI Bypass for Clear Commands Enables or disables the operating system to skip BIOS Physical Presence
Interface (PPI) user prompts when issuing the Clear command.
Default: OFF
TPM State Enables or disables the TPM. This is the normal operating state for the TPM
when you want to use its complete array of capabilities.
Default: Enabled
SMM Security Mitigation
SMM Security Mitigation Enables or disables additional UEFI SMM Security Mitigation protections.
Default: OFF
NOTE: This feature may cause compatibility issues or loss of functionality
with some legacy tools and applications.
Data Wipe on Next Boot
Start Data Wipe
CAUTION: This Secure Wipe Operation deletes information in a way
that it cannot be reconstructed.
If enabled, the BIOS will queue up a data wipe cycle for storage devices that are
connected to the motherboard on the next reboot.
Default: OFF
Absolute
Absolute Enables, disables or permanently disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute Software.
Default: Enabled
UEFI Boot Path Security
UEFI Boot Path Security Enables or disables the system to prompt the user to enter the Admin password
when booting a UEFI boot path from the F12 boot menu.
Default: Always Except Internal HDD
System setup 55