Dell Precision Dual USB Type-C Thunderbolt 3 Dock User Manual

Thunderbolt SecurityThe settings below configure the Thunderbolt adapter security settings within the operating system. Security Levels are not applicable orenforced in the Pre-boot environment.• No Security: Automatically connect to devices plugged into the Thunderbolt port.• User Authorization: Approval is required for any new devices connected to the Thunderbolt port.• Secure Connect: The Thunderbolt adapter port will only allow connection to devices that have been configured with a shared key.NOTE: The first time a Thunderbolt peripheral’s Unique ID is granted “always connect” PCIe access, a secure encrypted keyis written to the peripheral controller’s non-volatile memory and added to the host PC’s ACL list. Each time a peripheral’sUnique ID is found on the ACL, the PC’s controller sends a security challenge and the response from the peripheral is thenverified before the PCIe connection is allowed. If the response is not valid, the user receives a connection permission prompt.This capability, when enabled, prevents pre-SL2 capable peripherals from connecting to a PC; thereby preventing a potentialHW spoofing of an approved device to generate a DMA exploit (beyond what is prevented with SL1).• DisplayPort Only: Automatically connect to DisplayPort devices only. No Thunderbolt adapter or PCIe devices are allowed to connect.In the BIOS of a Dell Thunderbolt-enabled PC, you will be able to configure the security settings of the Thunderbolt connection. You canfind the configuration options in the BIOS path: System Configuration > USB / Thunderbolt Configuration.No security Allow legacy Thunderbolt devices to auto-connect – the CM autoconnects a new device plugged in.User Authorization Allow User Notification devices at minimum – the CM requestsconnection approval from the host SW and auto-approval may begiven based on the Unique ID of the connecting device.Secure Connect Allow one-time saved key devices at minimum – the CM requestsconnection approval from the host SW and auto-approval is onlygiven if the host challenge to the device is acceptable.DisplayPort Only Allow DisplayPort sinks to be connected (re-driver or DP tunnel, noPCIe tunneling).18 Thunderbolt Settings and Security Options