OptiPlex Tower 7010 Owner's Manual

PDF

System setup options

NOTE:Depending on your computer and its installed devices, the items that are listed in this section may or may not appear.

Table 1. System setup options—System information menu
The following table describes the System information menu options in the System setup program.
Overview
	OptiPlex Tower 7010
	BIOS Version	Displays the BIOS version number.
	Service Tag	Displays the Service Tag of the computer.
	Asset Tag	Displays the Asset Tag of the computer.
	Manufacture Date	Displays the manufacture date of the computer.
	Ownership Date	Displays the ownership date of the computer.
	Express Service Code	Displays the express service code of the computer.
	Ownership Tag	Displays the Ownership Tag of the computer.
	Signed Firmware Update	Displays whether the Signed Firmware Update is enabled on your computer.
	Processor Information
	Processor Type	Displays the processor type.
	Maximum Clock Speed	Displays the maximum processor clock speed.
	Minimum Clock Speed	Displays the minimum processor clock speed.
	Current Clock Speed	Displays the current processor clock speed.
	Core Count	Displays the number of cores on the processor.
	Processor ID	Displays the processor identification code.
	Processor L2 Cache	Displays the processor L2 Cache size.
	Processor L3 Cache	Displays the processor L3 Cache size.
	Microcode Version	Displays the microcode version.
	Intel Hyper-Threading Capable	Displays whether the processor is Hyper-Threading (HT) capable.
	64-Bit Technology	Displays whether 64-bit technology is used.
	Memory Information
	Memory Installed	Displays the total computer memory installed.
	Memory Available	Displays the total computer memory available.
	Memory Speed	Displays the memory speed.
	Memory Channel Mode	Displays single or dual channel mode.
	Memory Technology	Displays the technology that is used for the memory.
	DIMM 1 Size	Displays the DIMM 1 memory size.
	DIMM 2 Size	Displays the DIMM 2 memory size.
	DIMM 3 Size	Displays the DIMM 3 memory size.
	DIMM 4 Size	Displays the DIMM 4 memory size.
	Devices Information
	Video Controller	Displays the video controller type of the computer.
	Video Memory	Displays the video memory information of the computer.
	Wi-Fi Device	Displays the wireless device information of the computer.
	Native Resolution	Displays the native resolution of the computer.
	Video BIOS Version	Displays the video BIOS version of the computer.
	Audio Controller	Displays the audio controller information of the computer.
	Bluetooth Device	Displays the Bluetooth device information of the computer.
	LOM MAC Address	Displays the LAN On Motherboard (LOM) MAC address of the computer.
	dGPU Video Controller	Displays the discrete video controller type of the computer.
	Slot 1	Displays the PCIe information of the computer.
	Slot 2	Displays the PCIe information of the computer.
	Slot 3	Displays the PCIe information of the computer.
	Slot 4	Displays the PCIe information of the computer.

Table 2. System setup options—Boot Configuration menuThe following table describes the Boot Configuration menu options in the System Setup program.
Boot Configuration
	Boot Sequence
	Boot Mode: UEFI only	Displays the boot mode of the computer.
	Boot Sequence	Displays the boot sequence.
	Secure Digital (SD) Card Boot	Enable or disable the SD card read-only boot. By default, the Secure Digital (SD) Card Boot option is enabled.
	Secure Boot	Secure Boot is a method of guaranteeing the integrity of the boot path by performing additional validation of the operating system and PCI add-in cards. The computer stops booting to the operating system when a component is not authenticated during the boot process.
	Enable Secure Boot	Enables the computer to boot using only validated boot software. By default, the Enable Secure Boot option is enabled. For additional security, Dell Technologies recommends keeping the Secure Boot option enabled to ensure that the UEFI firmware validates the operating system during the boot process. NOTE:For Secure Boot to be enabled, the computer is required to be in UEFI boot mode and the Enable Legacy Option ROMs option is required to be turned off.
	Secure Boot Mode	Enables or disables the Secure Boot operation mode. By default, the Deployed Mode is selected. NOTE:Deployed Mode should be selected for normal operation of Secure Boot.
	Enable Microsoft UEFI CA	When disabled, the UEFI CA is removed from the BIOS UEFI Secure Boot database. NOTE:When disabled, the Microsoft UEFI CA could render your computer unable to boot, system graphics may not function, some devices may not function properly, and the computer could become unrecoverable. By default, the Enable Microsoft UEFI CA option is enabled. For additional security, Dell Technologies recommends keeping the Microsoft UEFI CA option enabled to ensure the broadest compatibility with devices and operating systems.
	Expert Key Management
	Enable Custom Mode	Enables or disables the keys in the PK, KEK, db, and dbx security key databases to be modified. By default, the Enable Custom Mode option is disabled.
	Custom Mode Key Management	Selects the custom values for expert key management. By default, the PK option is selected.

Table 3. System setup options—Integrated Devices menu The following table describes the Integrated Devices menu options in the System Setup program.
Integrated Devices
	Date/Time	Displays the current date in MM/DD/YYYY format and current time in HH:MM:SS AM/PM format.
	Audio
	Enable Audio	Enable or disable the integrated audio controller. By default, all the options are enabled.
	Serial Port
	Serial Port Configuration	Enable or disable the serial port address. By default, the COM1: Port is configured at 3F8h with IRQ4 option is enabled.
	USB Configuration	Enable or disable booting from USB mass storage devices through the boot sequence or boot menu. By default, all the options are enabled.
	Front USB Configuration	Enable or disable the individual front USB ports. By default, all the options are enabled.
	Rear USB Configuration	Enable or disable the individual rear USB ports. By default, all the options are enabled.
	Dust Filter Maintenance	Enable or disable the dust filter maintenance. By default, the Disabled option is enabled.

Table 4. System setup options—Storage menu The following table describes the Storage menu options in the System Setup program.
Storage
	SATA Operation	Enable or disable the operating mode of the integrated SATA hard drive controller. By default, the RAID On option is enabled.
	Storage Interface
	Port Enablement	Enable or disable the onboard drives. By default, all the options are enabled.
	SMART Reporting
	Enable SMART Reporting	Enable or disable Self-Monitoring, Analysis, and Reporting Technology (SMART) during computer startup. By default, the Enable SMART Reporting option is not enabled.
	Drive Information
	SATA-0
	Type	Displays the SATA HDD type information of the computer.
	Device	Displays the SATA HDD device information of the computer.
	SATA-1
	Type	Displays the SATA HDD type information of the computer.
	Device	Displays the SATA HDD device information of the computer.
	SATA-2
	Type	Displays the SATA HDD type information of the computer.
	Device	Displays the SATA HDD device information of the computer.
	SATA-3
	Type	Displays the SATA HDD type information of the computer.
	Device	Displays the SATA HDD device information of the computer.
	M.2 PCIe SSD-0
	Type	Displays the M.2 PCIe SSD-0 type information of the computer.
	Device	Displays the M.2 PCIe SSD-0 device information of the computer.
	Enable MediaCard
	Secure Digital (SD) Card	Enable or disable the SD card. By default, the Secure Digital (SD) Card option is enabled.
	Secure Digital (SD) Card Read-Only Mode	Enable or disable the SD card read-only mode. By default, the Secure Digital (SD) Card Read-Only Mode option is not enabled.

Table 5. System setup options—Display menuThe following table describes the Display menu options in the System Setup program.
Display
	Multi-Display
	Enable Multi-Display	Enable or disable the Enable Multi-Display buttons on the computer. By default, the option is enabled.
	Primary Display
	Video Primary Display	Determines the primary display when multiple controllers are available on the computer By default, the Auto option is enabled.
	Full Screen Logo	Enable or disable full screen logo. By default, the option is not enabled.

Table 6. System setup options—Connection menu The following table describes the Connection menu options in the System Setup program.
Connection
	Network Controller Configuration
	Integrated NIC	Controls the on-board LAN controller. By default, the Enabled with PXE option is enabled.
	Wireless Device Enable
	WLAN	Enable or disable the internal WLAN device By default, the option enabled.
	Bluetooth	Enable or disable the internal Bluetooth device By default, the option enabled.
	Enable UEFI Network Stack	Enable or disable UEFI Network Stack and controls the on-board LAN Controller. By default, the option is enabled.
	HTTPs Boot Feature
	HTTPs Boot	Enable or disable the HTTPs Boot feature. By default, the HTTPs Boot option is enabled.
	HTTPs Boot Mode	With Auto Mode, the HTTPs Boot extracts Boot URL from the DHCP. With Manual Mode, the HTTPs Boot reads Boot URL from the user-provided data. By default, the Auto Mode option is enabled.

Table 7. System setup options—Power menuThe following table describes the Power menu options in the System setup program.
Power
	USB PowerShare
	Enable USB PowerShare	Enable or disable the USB PowerShare. By default, the Enable USB PowerShare option is enabled
	USB Wake Support
	Enable USB Wake Support	When enabled, you can use the USB devices like a mouse or keyboard to wake your computer from standby. By default, the option is enabled.
	AC Behavior
	AC Recovery	Enables the system to turn on automatically, when AC is inserted. By default, the Power Off option is enabled.
	Active State Power Management
	Aspm	Enables or disables the Active State Power Management (ASPM) level By default, the Auto option is enabled.
	Block Sleep	Enables to block entering sleep (S3) mode in the operating system. By default, the Block Sleep option is disabled.
	Deep Sleep Control	Enable or disable the Deep Sleep mode support. By default, the Disabled option is enabled.
	Fan Control Override	Enable or disable the fan control override feature. By default, the option is disabled.
	Intel Speed Shift Technology	Enable or disable the Intel speed shift technology support. By default, the Intel Speed Shift Technology option is enabled.

Table 8. System setup options—Security menu
The following table describes the Security menu options in the System setup program.
Security
	TPM 2.0 Security
	TPM 2.0 Security On	Trusted Platform Module (TPM) is a security device that stores computer-generated keys for encryption and features such as BitLocker, Virtual Secure Mode, remote Attestation. By default, the Trusted Platform Module (TPM) option is enabled. For additional security, Dell Technologies recommends keeping Trusted Platform Module (TPM) enabled to allow these security technologies to fully function.
	TPM On	Allows you to enable or disable TPM. By default, the TPM On option is enabled. For additional security, Dell Technologies recommends keeping TPM enabled to allow these security technologies to fully function.
	Physical Presence Interface (PPI) Bypass for Enable Commands	The Physical Presence Interface (PPI) Bypass options can be used to allow the operating system to manage certain aspects of the TPM. If these options are enabled, you are not prompted to confirm certain changes to the TPM configuration. By default, the PPI Bypass for Enable Commands option is enabled. For additional security, Dell Technologies recommends keeping the PPI Bypass for Enable Commands option enabled.
	Physical Presence Interface (PPI) Bypass for Disable Commands	By default, the PPI Bypass for Disable Commands option is disabled. For additional security, Dell Technologies recommends keeping the PPI Bypass for Disable Commands option disabled.
	Physical Presence Interface (PPI) Bypass for Clear Commands	By default, the PPI Bypass for Clear Commands option is disabled. For additional security, Dell Technologies recommends keeping the PPI Bypass for Clear Commands option disabled.
	Attestation Enable	The Attestation Enable option controls the endorsement hierarchy of TPM. Disabling the Attestation Enable option prevents TPM from being used to digitally-sign certificates. By default, the Attestation Enable option is enabled. For additional security, Dell Technologies recommends keeping the Attestation Enable option enabled. NOTE:When disabled, this feature may cause compatibility issues or loss of functionality in some operating systems.
	Key Storage Enable	The Key Storage Enable option controls the storage hierarchy of TPM, which is used to store digital keys. Disabling the Key Storage Enable option restricts the ability of TPM to store owner's data. By default, the Key Storage Enable option is enabled. For additional security, Dell Technologies recommends keeping the Key Storage Enable option enabled. NOTE:When disabled, this feature may cause compatibility issues or loss of functionality in some operating systems.
	SHA-256	Allows you control the usage of SHA-256 by TPM. When enabled, the BIOS and TPM use the SHA-256 hash algorithm to extend measurements into the TPM PCRs during BIOS boot. When disabled, the BIOS and TPM use the SHA-1 hash algorithm to extend measurements into the TPM PCRs during BIOS boot. By default, the SHA-256 option is enabled. For additional security, Dell Technologies recommends keeping the SHA-256 option enabled.
	Clear	When enabled, the Clear option clears information stored in the TPM after exiting the system's BIOS. This option returns to disabled state when the system restarts. By default, the Clear option is disabled. Dell Technologies recommends enabling the Clear option only when TPM data is required to be cleared.
	PPI ByPass for Clear Commands	Controls the TPM Physical Presence Interface (PPI). By default, the PPI ByPass for clear Commands option is disabled.
	TPM State	Enables or disables the Trusted Platform Module (TPM). This is the normal operating state for the Trusted Platform Module (TPM) when you want to use its complete array of capabilities. By default, the TPM State option is enabled.
	Intel Platform Trust Technology (PTT)	Intel PTT is a firmware-based Trusted Platform Module (fTPM) device that is part of Intel chipsets. It provides credential storage and key management that can replace the equivalent functionality of a discrete TPM chip.
	PTT On	Enables or disables the Intel PTT option. By default, the PTT On option is enabled. For additional security, Dell Technologies recommends keeping the PTT On option enabled.
	Physical Presence Interface (PPI) Bypass for Clear Commands	The PPI Bypass for Clear Commands option allows the operating system to manage certain aspects of PTT. When enabled, you are not prompted to confirm changes to the PTT configuration. By default, the PPI Bypass for Clear Commands option is disabled. For additional security, Dell Technologies recommends keeping the PPI Bypass for Clear Commands option disabled.
	Clear	When enabled, the Clear option clears the information stored in the PTT fTPM after exiting the system's BIOS. This option returns to disabled state when the system restarts. By default, the Clear option is disabled. Dell Technologies recommends enabling the Clear option only when PTT fTPM data needs to be cleared.
	Chassis intrusion
	Chassis Intrusion Detection	Allows you to control the chassis intrusion feature. This feature notifies the user when the base cover has been removed from the computer. When set to Enabled, a notification is displayed on the next boot and the event is logged in the BIOS Events log. When set to On-Silent, the event is logged in the BIOS Events log, but no notification is displayed. When set to Disabled, no notification is displayed and no event is logged in the BIOS Events log. By default, the Chassis Intrusion Detection option is enabled. For additional security, Dell Technologies recommends keeping the Chassis Intrusion Detection option enabled.
	Block Boot Until Cleared	Enables or disables the Block Boot Until Cleared option. By default, the Block Boot Until Cleared option is enabled. NOTE:When enabled, the computer does not boot until the chassis intrusion is cleared. If the administrator password is set, Setup has to be unlocked before the warning can be cleared.
	Legacy Manageability Interface Access	Allows the administrator to control the access to BIOS configuration through the Legacy Manageability Interface option. When enabled, this prevents the BIOS Administrator password-based manageability tools from running, prevents some Dell software applications from reading configuration settings, and/or prevents changes to the BIOS configuration settings. When enabled, this option only supports the Authenticated BIOS Manageability Interface (ABI) for managing the BIOS configuration changes. To support this feature, ABI must be enabled and provisioned. When set to Enabled, the Legacy Manageability Interface can be used to read and change BIOS configuration settings. When set to Read-Only, BIOS configuration settings can be read, but cannot be changed through the Legacy Manageability Interface. When set to Disabled, the Legacy Manageability Interface is disabled. BIOS configuration reads and writes are blocked.
	SMM Security Mitigation	Enables or disables additional UEFI SMM Security Mitigation protections. This option uses the Windows SMM Security Mitigations Table (WSMT) to confirm to the operating system that security best practices have been implemented by the UEFI firmware. By default, the SMM Security Mitigation option is enabled. For additional security, Dell Technologies recommends keeping the SMM Security Mitigation option enabled unless you have a specific application which is not compatible. NOTE:This feature may cause compatibility issues or loss of functionality with some legacy tools and applications.
	Data Wipe on Next Boot
	Start Data Wipe	CAUTION:Secure Data Wipe operation deletes information in a way that it cannot be reconstructed. Commands such as delete and format in the operating system may remove files from showing up in the file system, however they can be reconstructed through forensic means as they are still represented on the physical media. Data Wipe prevents this reconstruction and is not recoverable. When enabled, the BIOS will queue up a data wipe cycle for storage devices that are connected to the motherboard on the next reboot. By default, the Start Data Wipe option is disabled.
	Absolute	Enables, disables, or permanently disables the BIOS module interface of the optional Absolute Persistence Module service from Absolute software. By default, the Absolute option is enabled. For additional security, Dell Technologies recommends keeping the Absolute option enabled. WARNING:The 'Permanently Disabled' option can only be selected once. When 'Permanently Disabled' is selected, Absolute Persistence cannot be re-enabled. No further changes to the Enable/Disable states are allowed. NOTE:The Enable/Disable options are unavailable while the computer is in the activated state. NOTE:When the Absolute features are activated, the Absolute integration cannot be disabled from the BIOS setup screen.
	UEFI Boot Path Security	Enables or disables the computer to prompt the user to enter the Administrator password (if set) when booting to a UEFI boot path device from the F12 boot menu. By default, the Always Except Internal HDD option is enabled.
	Firmware Device Tamper Detection	Allows you to control the firmware device tamper detection feature. This feature notifies the user when the firmware device is tampered. When enabled, a screen warning messages are displayed on the computer and a tamper detection event is logged in the BIOS Events log. The computer fails to reboot until the event is cleared. By default, the Firmware Device Tamper Detection option is enabled. For additional security, Dell Technologies recommends keeping the Firmware Device Tamper Detection option enabled.

Table 9. System setup options—Passwords menuThe following table describes the Passwords options in the System setup program.
Passwords
	Administrator Password	The Administrator Password prevents unauthorized access to the BIOS Setup options. Once the administrator password is set, the BIOS setup options can only be modified after providing the correct password. The following rules and dependencies apply to the Administrator Password - The administrator password cannot be set if system and/or internal hard drive passwords are previously set. The administrator password can be used in place of the system and/or internal hard drive passwords. When set, the administrator password must be provided during a firmware update. Clearing the administrator password also clears the system password (if set). Dell Technologies recommends using an administrator password to prevent unauthorized changes to BIOS setup options.
	System Password	The System Password prevents the system from booting to an operating system without entering the correct password. The following rules and dependencies apply when the System Password is used - The computer shuts down when idle for approximately 10 minutes at the system password prompt. The computer shuts down after three incorrect attempts to enter the system password. The computer shuts down when the Esc key is pressed at the System Password prompt. The system password is not prompted when the computer resumes from standby mode. Dell Technologies recommends using the system password in situations where it is likely that a system may be lost or stolen.
	Hard Drive Password	The Hard Drive Password can be set to prevent unauthorized access of the data stored on the hard drive. The computer prompts for the hard drive password during boot in order to unlock the drive. A password secured hard drive stays locked even when removed from the computer or placed into another computer. It prevents an attacker from accessing data on the drive without authorization. The following rules and dependencies apply when the Hard Drive Password is used - The hard drive password option cannot be accessed when a hard drive is disabled in the BIOS setup. The computer shuts down when idle for approximately 10 minutes at the hard drive password prompt. The computer shuts down after three incorrect attempts to enter the hard drive password and treats the hard drive as not available. The hard drive does not accept password unlock attempts after five incorrect attempts to enter the hard drive password from the BIOS Setup. The hard drive password must be reset for the new password unlock attempts. The computer treats the hard drive as not available when the Esc key is pressed at the hard drive password prompt. The hard drive password is not prompted when the computer resumes from standby mode. When the hard drive is unlocked by the user before the computer goes into standby mode, it remains unlocked after the computer resumes from standby mode. If the system and hard drive passwords are set to the same value, the hard drive unlocks after the correct system password is entered. Dell Technologies recommends using a hard drive password to protect unauthorized data access.
	Owner Password	The Owner Password is typically used when a system is loaned or leased, and the end user sets their own system or hard drive password. The Owner Password can provide override access to unlock the system when it is returned. The Owner Password cannot be set via BIOS Setup. System lessors are given a tool which enables them to configure the Owner Password. The following rules and dependencies apply when the Owner Password is used - The owner password cannot be set when the administrator password is already set. The owner password can be used in place of the administrator, system, or hard drive passwords. NOTE:The hard drive password must have been set on the computer with owner password. Dell Technologies recommends that only system lessors use the owner password.
	Strong Password	The Strong Password feature enforces stricter rules for administrator, owner, and system passwords. When enabled, the following rules are enforced - The minimum length of the password is set to 8 characters. The password is required to include at least 1 upper case and 1 lower case character. NOTE:These requirements do not affect the hard drive password. By default, the Strong Password option is enabled. For additional security, Dell Technologies recommends keeping the Strong Password option enabled as it requires passwords be more complex.
	NVMe SSD0	Set, change, or delete the NVMe SSD0 password.
	Password Configuration	The Password configuration page includes several options for changing the requirements of BIOS passwords. You can modify the minimum and maximum length of the passwords as well as require passwords to contain certain character classes (upper case, lower case, digit, special character). Dell Technologies recommends setting the minimum password length to at least 8 characters.
	Password Bypass	The Password Bypass option allows the computer to reboot from the operating system without entering the system or hard drive password. If the computer has already booted to the operating system, it is presumed that the user has already entered the correct system or hard drive password. NOTE:This option does not remove the requirement to enter the password after shutting down. By default, the Password Bypass option is enabled. For additional security, Dell Technologies recommends keeping the Password Bypass option enabled.
	Password Changes
	Allow Non-Admin Password Changes	The Allow Non-Admin Password Changes option in BIOS setup allows an end user to set or change the system or hard drive passwords without entering the administrator password. This gives an administrator control over the BIOS settings but enables an end user to provide their own password. By default, the Allow Non-Admin Password Changes option is disabled. For additional security, Dell Technologies recommends keeping the Allow Non-Admin Password Changes option disabled.
	Non-Admin Setup Changes	The Non-Admin Setup Changes option allows an end user to configure the wireless devices without requiring the administrator password. By default, the Non-Admin Setup Changes option is disabled. For additional security, Dell Technologies recommends keeping the Non-Admin Setup Changes option disabled.
	Admin Setup Lockout	The Admin Setup Lockout option prevents an end user from even viewing the BIOS setup configuration without first entering the administrator password (if set). By default, the Admin Setup Lockout option is disabled. For additional security, Dell Technologies recommends keeping the Admin Setup Lockout option disabled.
	Master Password Lockout
	Enable Master Password Lockout	The Master Password Lockout setting allows you to disable the Recovery Password feature. If the system, administrator, or hard drive password is forgotten, the system becomes unusable. NOTE:When the owner password is set, the Master Password Lockout option is not available. NOTE: When an internal hard drive password is set, it must first be cleared before Master Password Lockout can be changed. By default, the Enable Master Password Lockout option is disabled. Dell Technologies does not recommend enabling the Master Password Lockout unless you have implemented your own password recovery system.
	Allow Non-Admin PSID Revert
	Enable Allow Non-Admin PSID Revert	Controls access to the Physical Security ID (PSID) revert of NVMe hard-drives from the Dell Security Manager prompt. By default, the option is disabled.

Table 10. System setup options—Update, Recovery menu The following table describes the Update, Recovery options in the System setup program.
Update, Recovery
	UEFI Capsule Firmware Updates	Enable or disable BIOS updates through UEFI capsule update packages. By default, the option is enabled.
	BIOS Recovery from Hard Drive	Enables the user to recover from certain corrupted BIOS conditions from a recovery file on the user primary hard drive or an external USB key. By default, the option is enabled.
	BIOS Downgrade
	Allow BIOS Downgrade	Enable or disable the flashing of the computer firmware to previous revision is blocked. By default, the option is enabled.
	SupportAssist OS Recovery	Enable or disable the boot flow for SupportAssist OS Recovery tool in the event of certain computer errors. By default, the option is enabled.
	BIOSConnect	Enable or disable cloud Service OS recovery if the main operating system fails to boot with the number of failures equal to or greater than the value specified by the Auto OS Recovery Threshold setup option and local Service OS does not boot or is not installed. By default, the option is enabled.
	Dell Auto OS Recovery Threshold	Controls the automatic boot flow for SupportAssist System Resolution Console and for Dell OS Recovery Tool. By default, the threshold value is set to 2.

Table 11. System setup options—System Management menu The following table describes the System Management menu options in the System setup program.
System Management
	Service Tag	Display the Service Tag of the computer.
	Asset Tag	Create a computer Asset Tag.
	Wake on LAN/WLAN	Enable or disable the computer to power on by special LAN signals when it receives a wakeup signal from the WLAN. By default, the Disabled option is selected.
	Auto on Time	Enable to set the computer to turn on automatically every day or on a preselected date and time. This option can be configured only if the Auto On Time is set to Everyday, Weekdays, or Selected Days. By default, the option is disabled.
	Intel AMT Capability
	Enable Intel AMT Capability	Enable or disable the Intel AMT capabilty. By default, the Restrict MEBx Access option is enabled.
	MEBx Hotkey	Enable or disable MEBx hotkey. By default, the option is disabled.
	USB Provision
	Enable USB Provision	Enable or disable the Intel AMT provisioning using the local provisioning file through a USB storage device. By default, the option is disabled.
	SERR Messages	Enable or disable SERR messages. By default, the option is enabled.

Table 12. System setup options—Keyboard menu The following table describes the Keyboard menu options in the System setup program.
Keyboard
	Keyboard Errors
	Enable Keyboard Error Detection	Enable or disable the keyboard error detection. By default, the option is enabled.
	Numlock LED
	Enable Numlock LED	Enable or disable Numlock LED. By default, the option is enabled.
	Device Configuration Hotkey Access
	Device Configuration Hotkey Access	Enable or disable users to access device configuration by using hotkeys. By default, the option is enabled.

Table 13. System setup options—Pre-boot Behavior menu The following table describes the Pre-boot Behavior menu options in the System setup program.
Pre-boot Behavior
	Warning and Errors	Enable or disable the action to be done when a warning or error is encountered. By default, the Prompt on Warnings and Errors option is enabled.
	Fastboot	Enable to set the speed of the boot process. By default, the Minimal option is enabled.
	Extend BIOS POST Time	Set the BIOS POST time. By default, the 0 seconds option is enabled.

Table 14. System setup options—Virtualization menu The following table describes the Virtualization menu options in the System setup program.
Virtualization
	Intel Virtualization Technology
	Enable Intel Virtualization Technology (VT)	Specify whether a Virtual Machine Monitor (VMM) can utilize the additional hardware capabilities that are provided by Intel Virtualization Technology. By default, the option is enabled.
	VT for Direct I/O	Specify whether a Virtual Machine Monitor (VMM) can utilize the additional hardware capabilities that are provided by Intel Virtualization Technology for Direct I/O. By default, the option is enabled.
	Intel Trusted Execution Technology (TXT)
	Enable Intel Trusted Execution Technology (TXT)	Specifies whether a measured Virtual Machine Monitor (MVMM) can utilize the additional hardware capabilities that are provided by Intel Trusted Execution Technology. By default, the option is disabled.

Table 15. System setup options—Performance menu The following table describes the Performance menu options in the System setup program.
Performance
	Multi Core Support
	Active Cores	Enables to change the number of CPU cores available to the operating system. By default, the All Cores options are enabled.
	Intel SpeedStep
	Enable Intel SpeedStep Technology	Enables the computer to dynamically adjust processor voltage and core frequency, decreasing average power consumption and heat production. By default, the option is enabled.
	C-States Control
	Enable C-State Control	Enable or disable additional processor sleep states. By default, the option is enabled.
	Intel Turbo Boost Technology
	Enable Intel Turbo Boost Technology	Enable or disable Intel TurboBoost mode of the processor. By default, the option is enabled.
	Intel Hyper-Threading Technology
	Enable Intel Hyper-Threading Technology	Enable or disable Hyper-Threading in the processor. By default, the option is enabled.

Table 16. System setup options—System Logs menu
The following table describes the System Logs menu options in the System setup program.
System Logs
	BIOS Event Log
	Clear BIOS Event Log	Display BIOS events. By default, the Keep option is enabled.