Item
UEFI Capsule Firmware Updates — Enable UEFI Capsule
Firmware Updates [Enable/Disable]
TPM 1.2 Security
TPM 1.2 Security [Enable/Disable]
TPM On
PPI Bypass for Enable Commands
PPI Bypass for Disable Commands
Clear [Enable/Disable]
TPM 2.0 Security
TPM 2.0 Security [Enable/Disable]
TPM On
PPI Bypass for Enable Commands
PPI Bypass for Disable Commands
Attestation Enable [Enable/Disable]
Key Storage Enable [Enable/Disable]
SHA-256
Clear [Enable/Disable]
Computrace(R) — [Deactivate/Disable/Enable]
Chassis Intrusion — [Disable/Enable/On-Silent]
CPU XD Support — [Enable/Disable]
OROM Keyboard Access — [Enable/One Time Enable/
Disable]
Admin Setup Lockout — [Enable/Disable]
Secure boot
Item
Secure Boot Enable — [Enable/Disable]
Expert Key Management
Enable Custom Mode [Enable/Disable]
Custom Mode Key Management {PK/KEK/db/dbx}
Intel software guard extensions
Item
Intel SGX Enable — [Enable/Disable]
Enclave Memory Size — [32MB/64MB/128MB]
Default value
Enabled
Enabled
Enabled
Disabled
Disabled
Disabled
Enabled
Enabled
Disabled
Disabled
Enabled
Enabled
Enabled
Not applicable
Deactivate
Disable
Enabled
Enabled
Disabled
Default value
Disabled
Disabled
Platform Specific
Default value
Disabled
128 MB
49