Option DescriptionEnables you to control the reporting mode of the TPM. The TPM Security option isset to Off by default. You can only modify the TPM Status, TPM Activation, and IntelTXT fields if the TPM Status field is set to either On with Pre-boot Measurementsor On without Pre-boot Measurements.TPM Information Changes the operational state of the TPM. This option is set to No Change bydefault.TPM Status Specifies the TPM status.TPM Command CAUTION: Clearing the TPM results in the loss of all keys in the TPM. Theloss of TPM keys may affect booting to the operating system.Clears all the contents of the TPM. The TPM Clear option is set to No by default.Intel TXT Enables or disables the Intel Trusted Execution Technology (TXT) option. To enablethe Intel TXT option, virtualization technology and TPM Security must be enabledwith Pre-boot measurements. This option is set to Off by default.Power Button Enables or disables the power button on the front of the system. This option is setto Enabled by default.NMI Button Enables or disables the NMI button on the front of the system. This option is set toDisabled by default.AC PowerRecoverySets how the system behaves after AC power is restored to the system. This optionis set to Last by default.AC PowerRecovery DelaySets the time delay for the system to power up after AC power is restored to thesystem. This option is set to Immediate by default.User DefinedDelay (60s to240s)Sets the User Defined Delay option when the User Defined option for AC PowerRecovery Delay is selected.UEFI VariableAccessProvides varying degrees of securing UEFI variables. When set to Standard (thedefault), UEFI variables are accessible in the operating system per the UEFIspecification. When set to Controlled, selected UEFI variables are protected in theenvironment and new UEFI boot entries are forced to be at the end of the currentboot order.Secure Boot Enables Secure Boot, where the BIOS authenticates each pre-boot image by usingthe certificates in the Secure Boot Policy. Secure Boot is disabled by default.Secure BootPolicyWhen Secure Boot policy is set to Standard, the BIOS uses the systemmanufacturer’s key and certificates to authenticate pre-boot images. When SecureBoot policy is set to Custom, the BIOS uses the user-defined key and certificates.Secure Boot policy is set to Standard by default.Secure BootPolicy SummarySpecifies the list of certificates and hashes that secure boot uses to authenticateimages.Related LinksSystem SecurityViewing System Security53
