Reference Guide

Table 18. Security (continued)
Attribute Name Description
erase data from Hard Disk Drive.
NOTE: One of the methods of configuring this feature is from the BIOS setup
screen.
NOTE: You cannot enable MasterPasswordLockout while setting up with Hdd or
Owner's password.
OromKeyboardAccess
Determines whether users are able to enter Option ROM Configuration screens using
hotkeys during boot.
Possible values:
Enabled Users are able to enter OROM configuration screens using hotkeys
during boot.
OneTimeEnable Users will be able to enter OROM configuration screens using
hotkeys during next boot only. After next boot, the settings will revert to disabled.
Disabled Users are able to enter OROM configuration screens using hotkeys
during boot.
PasswordBypass
Allows users to skip the entry of the system password, HDD password, fingerprint
scan, or smartcard on either/both reboot (warm boot) or S3 resume (resume from
standby).
Possible values:
Disabled
RebootBypass
ResumeBypass
RebootAndResumeBypass
PasswordLock
Determines whether the changes to the system and HDD passwords are permitted or
restricted if an admin password is set.
Possible values:
Disabled If disabled, then the system and HDD passwords are locked by admin
password and cannot be set, modified, or deleted unless admin password is
provided.
Enabled If enabled, then the system and the HDD passwords can be set,
modified, or deleted.
Ppibypassforblocksid When there is no drive ownership and the ppibypassforblocksid is enabled, the BIOS
requires user input while sending the Block SID authentication command to SED
drives. When disabled, BIOS does not require user input while sending the Block SID
command.
Possible values:
Enabled
Disabled
SedBlockSidAuthentication
When there is no drive ownership and the SedBlockSidAuthentication is enabled,
BIOS sends the Block SID authentication command to SED drives. When disabled,
BIOS does not send the Block SID command.
Possible values:
Enabled
Disabled
NOTE: You can disable SedBlockSidAuthentication in manufacturing mode or
while setting up the BIOS Setup Administrator password.
Smmsecuritymitigation
Enables or disables the additional UEFI SMM Security Mitigation protections. The
operating system uses this feature to protect the secure environment created by
Attributes supported in Dell Command | PowerShell Provider 2.2 33