Option Description• Intel HD GraphicsNOTE: If you do not select Auto, the on-board graphics device will be present andenabled.SecurityTable 6. SecurityOption DescriptionAdmin Password Allows you to set, change, and delete the admin password.System Password Allows you to set, change, and delete the system password.Internal HDD-0 Password Allows you to set, change, and delete the computer internal hard drive.Strong Password This option lets you enable or disable strong password for the system. The option is disabled bydefault.Password Configuration Allows you to control the minimum and maximum number of characters that are enabled for anadministrative password and the system password. The range of characters is 4–32.Password Bypass This option enables you to bypass the System (Boot) password and the internal hard drive passwordprompts during a system restart.• Disabled—Always prompt for the system and internal hard drive password when they are set.This option is enabled by default.• Reboot Bypass—Bypass the password prompts on restarts (warm boots).NOTE: The system always prompts for the system and internal hard drive passwordswhen powered on from the off state (a cold boot). Also, the system prompts forpasswords on any module bay HDDs that may be present.Password Change This option lets you determine whether changes to the System and Hard Disk passwords arepermitted when an administrator password is set.Allow Non-Admin Password Changes - This option is enabled by default.UEFI Capsule Firmware Updates This option controls whether this system enables BIOS updates through UEFI capsule updatepackages. This option is enabled by default. Disabling this option blocks BIOS updates from servicessuch as Microsoft Windows Update and Linux Vendor Firmware Service (LVFS)TPM 2.0 Security Allows you to control whether the Trusted Platform Module (TPM) is visible to the operatingsystem.• TPM On—enabled by default• Clear• PPI Bypass for Enable Commands• PPI Bypass for Disable Commands• PPI Bypass for Clear Commands• Attestation Enable—enabled by default• Key Storage Enable—enabled by default• SHA-256—enabled by defaultThe options are:• Disabled• Enabled—enabled by defaultAbsolute This field enables you to enable, disable, or permanently disable the BIOS module interface of theoptional Absolute Persistence Module service from Absolute Software.• Enabled—enabled by default• DisabledSystem setup 71