CLI Guide

● On
Default Value Not Applicable
Write Privilege Server Control
License Required iDRAC Express or iDRAC Enterprise
Dependency Not applicable
BIOS.SysSecurity.TpmStatus (Read or Write)
Description
Displays the current status of the Trusted Platform Module (TPM), and is applicable only for TPM 1.2. If
the TPM is not present or TPM Security is set to Off, the value is set to Unknown.
Legal Values
● N/A
Default Value Not Applicable
Write Privilege Server Control
License Required iDRAC Express or iDRAC Enterprise
Dependency Not applicable
BIOS.SysSecurity.UefiVariableAccess (Read or Write)
Description
Provides varying degrees of securing UEFI variables. When set to Standard, UEFI variables are accessible
and can be modified in the Operating System (OS) per the UEFI specification. When set to Controlled,
select UEFI variables are protected and cannot be modified in an OS environment. New UEFI boot entries
are forced to be at the end of the current boot order.
Legal Values
● Standard
● Controlled
Default Value Not Applicable
Write Privilege Server Control
License Required iDRAC Express or iDRAC Enterprise
Dependency Not applicable
BIOS.TpmAdvancedSettings
This group contains the attributes that provides details about BIOS.TpmAdvancedSettings.
BIOS.TpmAdvancedSettings.Tpm2Algorithm (Read or Write)
Description
Allows the user to change the cryptographic algorithms used in the Trusted Platform Module (TPM). The
available options are dependent on the TPM firmware. To enable TPM2 Algorithm Selection, Intel(R) TXT
technology must be disabled.
To enable TPM2 Algorithm Selection, Intel(R) TXT technology must be disabled.
Legal Values
● SHA1
● SHA256
● SHA384
● SHA512
● SM3
Default Value Not Applicable
406 BIOS Attributes