Reference Guide

--SfuEnabled
Table 370. --SfuEnabled
Attribute Details Description
Valid Argument Yes, No
Enables the verication of digital signatures in the BIOS update payload prior to the update. If yes, the
system BIOS can be updated to versions that have valid digital signatures. However, it is not possible to
restore the value.
--SgxLaunchControl
Table 371. --SgxLaunchControl
Attribute Details Description
Valid Argument IntelLocked, RuntimeSelectable
Sets the Intel Software Guard Extensions Launch Control Policy by using the following options:
• IntelLocked - Locks SGX to support Intel Enclave Launch Provider.
• RuntimeSelectable - Allows operating system or hypervisor control of Enclave Launch Provider.
--SHA256
Table 372. --SHA256
Attribute Details Description
Valid Argument Disabled, Enabled, SHA384, SHA512
Sets the hash algorithm used for TPM 2.0 measurements.
• Disabled — Sets hash algorithm to disabled
• Enabled — Sets hash algorithm to enabled
• SHA384 — Sets hash algorithm to SHA-384
• SHA512 — Sets hash algorithm to SHA-512
NOTE: This value cannot be changed if TPM is already owned.
--UsbPortsSide
Table 373. --UsbPortsSide
Attribute Details Description
Valid Argument Enabled, Disabled
Enables or disables USB ports available on the side.
120 Options for Dell Command | Congure 4.2