Table 4 Computer Setup—Security (continued)

Network Service Boot

Enables/disables the computer’s ability to boot from an operating system installed on a network

 

server. (Feature available on NIC models only; the network controller must be either a PCI expansion

 

card or embedded on the system board.)

 

 

System IDs

Allows you to set:

 

● Asset tag (18-byte identifier), a property identification number assigned by the company to the

 

computer.

 

● Ownership tag (80-byte identifier) displayed during POST.

 

● Chassis serial number or Universal Unique Identifier (UUID) number. The UUID can only be

 

updated if the current chassis serial number is invalid. (These ID numbers are normally set in

 

the factory and are used to uniquely identify the system.)

 

● Keyboard locale setting (for example, English or German) for System ID entry.

 

 

DriveLock Security

Allows you to assign or modify a master or user password for hard drives. When this feature is

 

enabled, the user is prompted to provide one of the DriveLock passwords during POST. If neither

 

is successfully entered, the hard drive will remain inaccessible until one of the passwords is

 

successfully provided during a subsequent cold-boot sequence.

 

NOTE: This selection will only appear when at least one drive that supports the DriveLock feature

 

is attached to the system.

 

See the Desktop Management Guide for more information.

 

 

System Security (some

Data Execution Prevention (some models) (enable/disable) Helps prevent operating system security

models: these options

breaches.

are hardware

Virtualization Technology (some models) (enable/disable) Controls the virtualization features of the

dependent)

 

processor. Changing this setting requires turning the computer off and then back on.

 

Embedded Security Device Support (some models) (enable/disable) Permits activation and

 

deactivation of the Embedded Security Device. Changing this setting requires turning the computer

 

off and then back on.

 

NOTE: To configure the Embedded Security Device, a Setup password must be set.

 

● Reset to Factory Settings (some models) (Do not reset/Reset) Resetting to factory defaults will

 

erase all security keys. Changing this setting requires turning the computer off and then back

 

on.

 

CAUTION: The embedded security device is a critical component of many security schemes.

 

Erasing the security keys will prevent access to data protected by the Embedded Security

 

Device. Choosing Reset to Factory Settings may result in significant data loss.

 

● Power-on authentication support (some models) (enable/disable) Controls the power-on

 

password authentication scheme that utilizes the Embedded Security Device. Changing this

 

setting requires turning the computer off and then back on.

 

● Reset authentication credentials (some models) (Do not reset/Reset) Selecting Reset disables

 

the power-on authentication support and clears the authentication information from the

 

Embedded Security Device. Changing this setting requires turning the computer off and then

 

back on

 

OS management of Embedded Security Device (some models) (enable/disable) This option allows

 

the user to limit operating system control of the Embedded Security Device. Changing this setting

 

requires turning the computer off and then back on. This option allows the user to limit OS control

 

of the Embedded Security Device.

 

● Reset of Embedded Security Device through OS (some models) (enable/disable) This option

 

allows the user to limit the operating system ability to request a Reset to Factory Settings of

 

the Embedded Security Device. Changing this setting requires turning the computer off and

 

then back on.

 

NOTE: To enable this option, a Setup password must be set.

 

 

8 Computer Setup (F10) Utility

ENWW