White Papers
Table Of Contents
- Dell Trusted Device Installation and Administrator Guide v3.6
- Contents
- Introduction
- Requirements
- Download the software
- Verify the installation package
- Installation
- Uninstall Trusted Device
- BIOS Verification
- Image Capture
- BIOS Events & Indicators of Attack
- Security Risk Protection Score
- Intel ME Verification
- Integration
- Run the BIOS Verification Agent
- Results, troubleshooting, and remediation
Maximum value = 172800 (48 hours)
Default = every 12 hours
Value (in decimal) = 3600 - sweeps occur every hour
Value (in decimal) = 172800 - sweeps occur every 48 hours
● This entry changes the delay in milliseconds between each individual BIOS attribute retrieval.
HKLM\SOFTWARE\Dell\TrustedDevice\
DWORD=MSBetweenAttributeReads
Minimum value in milliseconds = 500
Maximum value in milliseconds = 2000
Default = every 500 milliseconds
Value (in decimal) = 500 - reads a different BIOS attribute every 500 milliseconds
Value (in decimal) = 2000 - reads a different BIOS attribute every 2000 milliseconds
Security Risk Protection Score
● This entry disables Security Risk Protection Score.
HKLM\SOFTWARE\Dell\TrustedDevice\
DWORD=SecurityScore
Default = 1 (enabled)
Value = 1 - enabled
Value = 0 - disabled
NOTE:
If Security Risk Protection Score is disabled in the Registry, component assessments are not run and no score is
generated.
Troubleshooting
If BIOS results are unavailable, browser-based results do not display. See the following table for error codes.
Error Code
Meaning
Additional Information
0 Verification passed The local BIOS is verified against a known-good Dell BIOS.
1 Verification failed The local BIOS failed verification against a known-good Dell
BIOS.
2 The verification result is
tampered
The verification result is tampered. Run the Dell Trusted
Device agent again. If this error persists, reinstall the Dell
Trusted Device agent or contact Dell Support.
3 An unknown error occurred The Dell Trusted Device agent failed to retrieval details. Run
the Dell Trusted Device agent again. If this error persists,
contact Dell Support.
4 An invalid command-line
argument was specified
A command-line variable passed to the Dell Trusted Device
agent is not supported. See the supported command-line
syntax for the Dell Trusted Device agent here or run the Dell
Trusted Device agent with the -help switch or /?
5 The agent is running with
insufficient privileges
The Dell Trusted Device agent requires local administrator
rights to run.
40 Results, troubleshooting, and remediation