Reference Guide

Attribute Name Description
SecureBootPolicy
Configures the secure boot policy.
• Standard — The BIOS uses the system manufacturer's keys and certificates to
authenticate preboot images.
• Custom — The BIOS uses user-defined keys and certificates. Secure Boot
Policy is Standard by default.
ChassisIntrusion
The chassis intrusion switch is a physical switch which triggers an event when
the chassis is opened.
Possible values:
• Enabled — The system detects and reports chassis intrusion events to the
system display on boot-up.
• Disabled — The system does not detect and report Chassis Intrusion events
to the system display on boot-up.
• On Silent — The system detects, but does not report Chassis Intrusion events
to the system display on boot-up.
CPUXDSupport
Enables or disables the run disable mode of the processor. The operating
system can use this feature to hinder software that exploits buffer overflows.
Possible values:
• Enabled
• Disabled
AdminSetupLockout
Enables or disables admin setup lockout.
Possible values:
• Enabled
• Disabled
HDDProtectionSupp
ort
Lets the user choose loading of HDD Protection OPROM.
SecureBoot
Table 12. SecureBoot
Attribute Name Description
SecureBootEnable
Enables the SecureBoot feature. For SecureBoot to be enabled, the
system needs to be in UEFI boot mode, and the Enable Legacy Option
ROMs option needs to be turned off.
Possible values:
• Enabled
NOTE: SecureBoot feature can be disabled only from the BIOS setup
screen.
19