
Latitude 5290 2-in-1 Owner's Manual
Security screen options
- Option
- Description
- Admin Password
- Allows you to set, change, or delete the administrator
(admin) password.
NOTE: : You must set the admin password before you set the system or hard drive password. Deleting the admin password automatically deletes the system password and the hard drive password.
NOTE: : Password changes take effect immediately.
By default, the drive will not have a password set.
- System Password
- Allows you to set, change or delete the system password.
NOTE: : Password changes take effect immediately.
By default, the drive will not have a password set.
- M.2 SATA SSD-2 Password
- Allows you to set, change, or delete the password on the system's
M.2
SATA solid state drive(SSD).
NOTE: : Password changes take effect immediately.
By default, the drive will not have a password set.
- Strong Password
- Allows you to enforce the option to always set strong
passwords.
Default Setting: Enable Strong Password is not selected.
NOTE: : If user interface is enabled, Admin and System passwords must contain at least one uppercase character, one lowercase character and be at least 8 characters long.
- Password Configuration
- Allows you to determine the minimum and maximum length of Administrator and System passwords.
- Password Bypass
- Allows you to disable or enable the permission to
bypass the System and the Internal hard drive password, when they are set.
The options are:
- Disabled. This option is selected by default.
- Reboot bypass
- Password Change
- Allows you to enable or disable permission to the
System and Hard Drive passwords when the admin password is set.
Allow Non-Admin Password Changes This option is selected by default.
- Non-Admin Setup Changes
- Allows you to determine whether changes to the setup options are allowed when an administrator password is set. If disabled the setup options are locked by the admin password.
- UEFI Capsule Firmware Updates
This option controls whether the system allows BIOS updates via UEFI capsule update packages.
Enable UEFI Capsule Firmware Updates option is selected by default.
NOTE: : Disabling this option will block BIOS updates from services such as Microsoft Windows Update and Linux Vendor Firmware Service (LVFS).
- TPM 2.0 Security
- Allows you to enable the Trusted Platform Module (TPM)
during POST. You can control whether the trusted platform module is visible to the operating system. The option is:
- TPM on This option is selected by default.
- Clear
- PPI Bypass for Enable Commands This option is selected by default.
- Attestation Enable. This option is selected by default.
- PPI Bypass for Disable Commands
- Key Storage Enable. This option is selected by default.
- SHA-256. This option is selected by default.
CAUTION: : For the TPM upgrade/downgrade process, it is recommended to complete the process in an AC power with AC adapter plugged into the computer. The upgrade/downgrade process without the AC adapter plugged in might damage the computer or hard disk.
NOTE: : Disabling this option does not change any settings you have made to the TPM, nor does it delete or change any information or keys you may have stored in the TPM. Changes to this setting take effect immediately.
- Computrace (R)
- Allows you to activate or disable the optional Computrace
Service from Absolute software. The options are:
- Deactivate
- Disable
- Activate
NOTE: : The Activate and Disable options will permanently activate or disable the feature and no further changes will be allowed
Default setting: Activate
- OROM Keyboard Access
- Allows you to set an option to enter the Option ROM
Configuration screens using hotkeys during boot. The options are:
- Enabled. This option is selected by default.
- One Time Enable
- Disabled
Default setting: Enable
- Admin Setup Lockout
- Allows you to prevent users from entering the setup
when an Administrator password is set.
Enable Admin Setup Lockout This option is not selected by default.
- Master Password Lockout
- Allows you to prevent users from entering the setup
when an Master password is set. Hard disk passwords need to be cleared before the setting can be changed.
Enable Master Password Lockout This option is not selected by default.
- SSM Security Mitigation
- Allows you to enable or disable additional UEFI SMM Security Mitigation protections. The OS can use the feature to help protect the secure environment created by virtualization based security.
SSM Security Mitigation This option is disabled by default.