Table 38. System setup options—Passwords menu (continued)PasswordsFor additional security, Dell Technologies recommends keeping the PasswordBypass option disabled.Password ChangesAllow Non-Admin Password Changes The Allow Non-Admin Password Changes option in BIOS setup allows an enduser to set or change the computer or hard drive passwords without enteringthe administrator password. This gives an administrator control over the BIOSsettings but enables an end user to provide their own password.By default, the Allow Non-Admin Password Changes option is enabled.For additional security, Dell Technologies recommends keeping the Allow Non-Admin Password Changes option enabled.Admin Setup Lockout The Admin Setup Lockout option prevents an end user from even viewing theBIOS setup configuration without first entering the administrator password (ifset).By default, the Admin Setup Lockout option is disabled.For additional security, Dell Technologies recommends keeping the Admin SetupLockout option disabled.Master Password LockoutEnable Master Password Lockout The Master Password Lockout setting allows you to disable the RecoveryPassword feature. If the computer, administrator, or hard drive password isforgotten, the computer becomes unusable.NOTE: When an internal solid-state drive password is set, it must first becleared before Master Password Lockout can be changed.By default, the Enable Master Password Lockout option is disabled.Dell Technologies does not recommend enabling the Master Password Lockoutunless you have implemented your own password recovery computer.Allow Non-Admin PSID RevertEnable Allow Non-Admin PSID Revert Allows you to control access to the Physical Security ID (PSID) revert of NVMehard-drives from the Dell Security Manager prompt.When enabled, PSID revert is allowed to proceed without providing the BIOSAdmin password.By default, the Enable Allow Non-Admin PSID Revert option is disabled.Table 39. System setup options—Update, Recovery menuUpdate, RecoveryUEFI Capsule Firmware UpdatesEnable UEFI Capsule Firmware Updates Enables or disables BIOS updates through UEFI capsule update packages.NOTE: Disabling this option blocks the BIOS updates from services such asMicrosoft Windows Update and Linux Vendor Firmware Service (LVFS).By default, the Enable UEFI Capsule Firmware Updates option is enabled.BIOS Recovery from Hard Drive Enables or disables the user to recover from certain corrupted BIOS conditionsfrom a recovery file on the user primary hard drive or an external USB key.By default, the BIOS Recovery from Hard Drive option is enabled.NOTE: BIOS Recovery from Hard Drive is not available for self-encryptingdrives (SED).NOTE: BIOS recovery is designed to fix the main BIOS block and cannot workif the Boot Block is damaged. In addition, this feature cannot work in theBIOS Setup 151