Reference Guide

Legal Values
● N/A
Default Value Not Applicable
Write Privilege Server Control
License Required iDRAC Express or iDRAC Enterprise
Dependency Not applicable
BIOS.SysSecurity.PasswordStatus (Read or Write)
Description
When set to Unlocked the system password can be changed without entering the setup password. This
allows an administrator to maintain a setup password to protect against unauthorized BIOS Setup
changes, while a user can freely change the system password. When set to Locked, the setup password
must be entered to change the system password. To prevent the system password from being modified
without providing the setup password, set this option to Locked and enable the setup password.
Legal Values
● Locked
● Unlocked
Default Value Not Applicable
Write Privilege Server Control
License Required iDRAC Express or iDRAC Enterprise
Dependency Not applicable
BIOS.SysSecurity.PwrButton (Read or Write)
Description
Allows enabling or disabling of the power button on the front panel.
Legal Values
● Enabled
● Disabled
Default Value Not Applicable
Write Privilege Server Control
License Required iDRAC Express or iDRAC Enterprise
Dependency Not applicable
BIOS.SysSecurity.SecureBoot (Read or Write)
Description
Allows enabling of Secure Boot, where the BIOS authenticates each component that is executed during
the boot process using the certificates in the Secure Boot Policy. The following components are validated
in the boot process: - UEFI drivers that are loaded from PCIe cards - UEFI drivers and executables from
mass storage devices - Operating system boot loaders Note: Secure Boot is not available unless the Boot
Mode (in the Boot Settings menu) is set to UEFI. Note: Secure Boot is not available unless the Load
Legacy Video Option ROM setting (in the Miscellaneous Settings menu) is disabled. Note: You should
create a setup password if you enable Secure Boot.
When the value of SecureBootMode is DeployedMode AND the value of SecureBoot is Enabled, BIOS will
append a ProgReadOnlyLocal modifier to SecureBoot, SecureBootPolicy, and SecureBootMode. This
means that inband system management tools will not allow users to change these attributes when these
conditions are true.
NOTE: BiosBootSettings.Bootmode must be set to UEFI and MiscSettings.ForceInt10
must be Disabled to operate this property.
350 BIOS Attributes