Specifications

Option Description
Password Configuration Allows you to control the minimum and maximum number of characters allowed for a administrative
password and the system password. The range of characters is between 4 and 32.
Password Bypass This option lets you bypass the System (Boot) Password and the internal HDD password prompts
during a system restart.
• Disabled — Always prompt for the system and internal HDD password when they are set. This
option is selected by default.
• Reboot Bypass — Bypass the password prompts on Restarts (warm boots).
NOTE: The system will always prompt for the system and internal HDD passwords
when powered on from the off state (a cold boot). Also, the system will always prompt
for passwords on any module bay HDDs that may be present.
Password Change This option lets you determine whether changes to the System and Hard Disk passwords are
permitted when an administrator password is set.
Allow Non-Admin Password Changes - This option is enabled by default.
UEFI Capsule Firmware Updates This option controls whether this system allows BIOS updates via UEFI capsule update packages.
This option is selected by default. Disabling this option will block BIOS updates from services such as
Microsoft Windows Update and Linux Vendor Firmware Service (LVFS)
TPM 2.0 Security Allows you to control whether the Trusted Platform Module (TPM) is visible to the operating
system.
• TPM On (default)
• Clear
• PPI Bypass for Enable Commands
• PPI Bypass for Disable Commands
• Attestation Enable (default)
• Key Storage Enable(default)
• SHA-256(default)
• Disabled
• Enabled (default)
Computrace This field lets you Activate or Disable the BIOS module interface of the optional Computrace Service
from Absolute Software. Enables or disables the optional Computrace service designed for asset
management.
• Deactivate - This option is selected by default.
• Disable
• Activate
Chassis Intrusion Allows you to control the chassis intrusion feature. You can set this option to:
• Enabled
• Disabled (default)
• On-Silent
CPU XD Support Allows you to enable or disable the Execute Disable mode of the processor. This option is enabled by
default.
OROM Keyboard Access
This option determines whether users are able to enter Option ROM Configuration screens via
hotkeys during boot. Specifically, these settings are capable of preventing access to Intel RAID
(CTRL+I) or Intel Management Engine BIOS Extension (CTRL+P/F12).
• Enable (selected by default)— User may enter OROM configuration screens via the hotkey.
• One-Time Enable — User may enter OROM configuration screens via the hotkeys on next boot
only. After next boot, the setting will revert to disabled.
• Disable — User may not enter OROM configuration screens via the hotkey.
Admin Setup Lockout Allows you to enable or disable the option to enter Setup when an Administrative password is set.
This option is not set by default.
20 System setup