Service Manual
BIOS level 2 BIOS level 3 Item Default value
Password Change Password Change Allow Non-Admin Password
Changes [Enable/Disable]
Enabled
UEFI Capsule Firmware
Updates
UEFI Capsule Firmware
Updates
Enable UEFI Capsule Firmware
Updates [Enable/Disable]
Enabled
TPM 2.0 Security TPM 2.0 Security TPM 2.0 Security [Enable/
Disable]
Enabled
TPM On [Enable/Disable] Enabled
PPI Bypass for Enable
Commands [Enable/Disable]
Disabled
PPI Bypass for Disable
Commands [Enable/Disable]
Disabled
Attestation Enable [Enable/
Disable]
Enabled
Key Storage Enable [Enable/
Disable]
Enabled
SHA-256 [Enable/Disable] Enabled
Clear [Enable/Disable] Disabled
Computrace(R) Computrace(R) Deactivate/Disable/Activate Deactivate
Chassis Intrusion Chassis Intrusion [Disable/Enable/On-Silent] Disable
CPU XD Support CPU XD Support Enable CPU XD Support
[Enable/Disable]
Enabled
Admin Setup Lockout Admin Setup Lockout Enable Admin Setup Lockout
[Enable/Disable]
Disabled
Secure boot (BIOS level 1)
Table 5. Secure boot (BIOS level 1)
BIOS level 2 BIOS level 3 Item Default value
Secure Boot Enable Secure Boot Enable [Enable/Disable] Disabled
Expert Key Management Expert Key Management Enable Custom Mode [Enable/
Disable]
Disabled
Custom Mode Key
Management {PK/KEK/db/
dbx}
PK
64