Table 5. Security (continued)
Option
Description
UEFI Capsule Firmware
Updates
This option controls whether this system allows BIOS updates via UEFI capsule update
packages. The
Enable UEFI Capsule Firmware Updates
option is selected by default.
NOTE:
Disabling this option will block BIOS updates from services such as Microsoft
Windows Update and Linux Vendor Firmware Service (LVFS)
PTT Security
●
PTT On (enabled by default) — This option allows you to control whether the Platform
Trust technology (PTT) is visible to the operating system.
NOTE:
Disabling this option does not change any settings you have made to the PTT,
nor does it delete or change any information or keys you may have stored in the PTT.
Changes to this setting take effect immediately.
●
Clear — This setting clears the PTT owner information, and returns the PTT to the
default state. Changes to this setting will be latched in BIOS after checking "apply", but
will not take effect in the PTT until after exiting the BIOS setup menu.
●
PPI Bypass for Clear Commands — This option controls the PTT Physical Presence
Interface (PPI). When enabled, this setting will allow the OS to skip BIOS PPI
user prompts when issuing the Clear command. Changes to this setting take effect
immediately.
Absolute
This field lets you Enable, Disable or Permanently Disable the BIOS module interface of the
optional Absolute Persistence Module service from Absolute Software.
●
Enabled (enabled by default) — Enable the Absolute Persistence and load the firmware
Persistence Module.
●
Disabled — Disable Absolute Persistence. The firmware Persistence Module is not
installed.
●
Permanently Disabled — Permanently disables Absolute Persistence module interface
from farther use.
WARNING:
The Permanently Disabled option can only be selected once. When
Permanently Disabled is selected, Absolute Persistence cannot be re-enabled.
No further changes to the Enabled/Disabled state are allowed.
Admin Setup Lockout
Allows you to prevent users from entering Setup when an Admin password is set. This option
is not set by default.
Master Password Lockout
Allows you to disable master password support. Hard Disk passwords need to be cleared
before the settings can be changed. This option is not set by default.
SMM Security Mitigation
Allows you to enable or disable additional UEFI SMM Security Mitigation protections. This
option is not set by default.
Secure boot
Table 6. Secure Boot
Option
Description
Secure Boot Enable
Allows you to enable or disable the Secure Boot feature. The
Secure Boot Enable
option
is enabled by default.
Secure Boot Mode
Allows you to modify the behavior of Secure Boot to allow evaluation or enforcement of
UEFI driver signatures.
●
Deployed Mode (enabled by default)
●
Audit Mode
Expert key Management
Allows you to manipulate the security key databases only if the system is in Custom Mode.
The
Enable Custom Mode
option is disabled by default. The options for Custom Mode
Key Management are:
●
PK (enabled by default)
●
KEK
●
db
System setup
71
Summary of Contents for Latitude 3120
Page 12: ...Major components of your system 1 Display assembly 12 Removing and installing components ...
Page 14: ...14 Removing and installing components ...
Page 16: ...16 Removing and installing components ...
Page 30: ...30 Removing and installing components ...
Page 32: ...32 Removing and installing components ...
Page 42: ...42 Removing and installing components ...
Page 44: ...44 Removing and installing components ...
Page 50: ...50 Removing and installing components ...