Table 4 Computer Setup—Security (continued)

Option

Description

 

 

 

 

●

SATA1

 

●

SATA2

 

●

SATA3

 

 

USB Security

Allows you to disable individual or groups of USB ports.

 

 

Slot Security

Allows you to disable PCIe and PCI slots along with cards plugged into them.

 

 

Network Service Boot

Enables/disables the computer’s ability to boot from an operating system installed on a network

 

server. (Feature available on NIC models only; the network controller must be either a PCI expansion

 

card or embedded on the system board.)

 

 

System IDs

Allows you to set:

 

● Asset tag (18-byte identifier), a property identification number assigned by the company to the

 

 

computer.

 

● Ownership tag (80-byte identifier) displayed during POST.

 

● Chassis serial number or Universal Unique Identifier (UUID) number. The UUID can only be

 

 

updated if the current chassis serial number is invalid. (These ID numbers are normally set in

 

 

the factory and are used to uniquely identify the system.)

 

● Keyboard locale setting (for example, English or German) for System ID entry.

 

 

DriveLock Security

Allows you to assign or modify a master or user password for hard drives. When this feature is

 

enabled, the user is prompted to provide one of the DriveLock passwords during POST. If neither

 

is successfully entered, the hard drive will remain inaccessible until one of the passwords is

 

successfully provided during a subsequent cold-boot sequence.

 

NOTE: This selection will only appear when at least one drive that supports the DriveLock feature

 

is attached to the system. You may need to power-cycle the system and re-enter F10 Setup in order

 

to manage DriveLock passwords.

 

See the Desktop Management Guide for more information.

 

 

System Security (some

Data Execution Prevention (some models) (enable/disable) Helps prevent operating system security

models: these options

breaches.

are hardware

Virtualization Technology (some models) (enable/disable) Controls the virtualization features of the

dependent)

 

processor. Changing this setting requires turning the computer off and then back on.

Embedded Security Device Support (some models) (enable/disable) Permits activation and deactivation of the Embedded Security Device. Changing this setting requires turning the computer off and then back on.

NOTE: To configure the Embedded Security Device, a Setup password must be set.

Reset to Factory Settings (some models) (Do not reset/Reset) Resetting to factory defaults will erase all security keys. Changing this setting requires turning the computer off and then back on.

CAUTION: The embedded security device is a critical component of many security schemes. Erasing the security keys will prevent access to data protected by the Embedded Security Device. Choosing Reset to Factory Settings may result in significant data loss.

OS management of Embedded Security Device (some models) (enable/disable) This option allows the user to limit operating system control of the Embedded Security Device. Changing this setting requires turning the computer off and then back on. This option allows the user to limit OS control of the Embedded Security Device.

● Reset of Embedded Security Device through OS (some models) (enable/disable) This option allows the user to limit the operating system ability to request a Reset to Factory Settings of

8 Computer Setup (F10) Utility

ENWW