Menu Item DescriptionClears all the contents of the TPM. By default, the TPM Clear option is set to No.Intel TXT Enables or disables the Intel Trusted Execution Technology (TXT). To enable IntelTXT, Virtualization Technology must be enabled and TPM Security must beEnabled with Pre-boot measurements. By default, the Intel TXT option is set toOff.Power Button Enables or disables the power button on the front of the system. By default, thePower Button option is set to Enabled.NMI Button Enables or disables the NMI button on the front of the system. By default, the NMIButton option is set to Disabled.AC PowerRecoverySets how the system reacts after AC power is restored to the system. By default,the AC Power Recovery option is set to Last.AC PowerRecovery DelaySets how the system supports staggering of power up after AC power is restored tothe system. By default, the AC Power Recovery Delay option is set to Immediate.User Defined Delay(60s to 240s)Sets the User Defined Delay when the User Defined option for AC Power RecoveryDelay is selected.UEFI VariableAccessProvides varying degrees of securing UEFI variables. When set to Standard (thedefault) UEFI variables are accessible in the Operating System per the UEFIspecification. When set to Controlled, selected UEFI variables are protected in theenvironment and new UEFI boot entries are forced to be at the end of the currentboot order.Secure Boot Enables Secure Boot, where the BIOS authenticates each pre-boot image using thecertificates in the Secure Boot Policy. Secure Boot is disabled by default.Secure Boot Policy When Secure Boot policy is Standard, the BIOS uses the system manufacturer’s keyand certificates to authenticate pre-boot images. When Secure Boot policy isCustom, the BIOS uses the user-defined key and certificates. Secure Boot policy isStandard by default.Secure Boot PolicySummaryViews the list of certificates and hashes that secure boot uses to authenticatedimages.Secure Boot Custom Policy SettingsSecure Boot Custom Policy Settings is displayed only when Secure Boot Policy is set to Custom.In the System Setup Main Menu, click System BIOS → System Security → Secure Boot Custom PolicySettings.The Secure Boot Custom Policy Settings screen details are explained as follows:ExampleMenu Item DescriptionPlatform Key Imports, exports, deletes, or restores the platform key (PK).Key Exchange KeyDatabaseAllows you to import, export, delete, or restore entries in the Key Exchange Key(KEK) Database45
