Table 4 Computer Setup—Security (continued)

 

●

Legacy diskette

 

● Embedded security device (some models)

 

●

SATA0

 

●

SATA1 (some models)

 

●

SATA4 (some models)

 

●

SATA5 (some models)

 

 

Network Service Boot

Enables/disables the computer’s ability to boot from an operating system installed on a network

 

server. (Feature available on NIC models only; the network controller must be either a PCI expansion

 

card or embedded on the system board.)

 

 

System IDs

Allows you to set:

 

● Asset tag (18-byte identifier) and ownership tag (80-byte identifier displayed during POST).

 

 

See the Desktop Management Guide for more information.

 

● Chassis serial number or Universal Unique Identifier (UUID) number. The UUID can only be

 

 

updated if the current chassis serial number is invalid. (These ID numbers are normally set in

 

 

the factory and are used to uniquely identify the system.)

 

● Keyboard locale setting (for example, English or German) for System ID entry.

 

 

DriveLock Security

Allows you to assign or modify a master or user password for hard drives. When this feature is

 

enabled, the user is prompted to provide one of the DriveLock passwords during POST. If neither

 

is successfully entered, the hard drive will remain inaccessible until one of the passwords is

 

successfully provided during a subsequent cold-boot sequence.

 

NOTE: This selection will only appear when at least one drive that supports the DriveLock feature

 

is attached to the system.

 

See the Desktop Management Guide for more information.

 

 

System Security (some

Data Execution Prevention (some models) (enable/disable) Helps prevent operating system security

models: these options

breaches.

are hardware

Virtualization Technology (some models) (enable/disable) Controls the virtualization features of the

dependent)

 

processor. Changing this setting requires turning the computer off and then back on.

Embedded Security Device Support (some models) (enable/disable) Permits activation and deactivation of the Embedded Security Device. Changing this setting requires turning the computer off and then back on.

NOTE: To configure the Embedded Security Device, a Setup password must be set.

If Embedded Security Device Support is enabled, the following options are available:

● Reset to Factory Settings (some models) (Do not reset/Reset) Resetting to factory defaults will erase all security keys. Changing this setting requires turning the computer off and then back on.

CAUTION: The embedded security device is a critical component of many security schemes.

Erasing the security keys will prevent access to data protected by the Embedded Security

Device. Choosing Reset to Factory Settings may result in significant data loss.

● Power-on authentication support (some models) (enable/disable) Controls the power-on password authentication scheme that utilizes the Embedded Security Device. Changing this setting requires turning the computer off and then back on.

● Reset authentication credentials (some models) (Do not reset/Reset) Selecting Reset disables the power-on authentication support and clears the authentication information from the Embedded Security Device. Changing this setting requires turning the computer off and then back on

ENWW

Computer Setup (F10) Utilities 7