Latitude 3120/Latitude 3120 2-in-1 Service Manual

Security

Table 1. SecurityThe following table describes the information about the computer’s security:
Option	Description
Admin Password	Allows you to set, change, and delete the admin password. NOTE If you delete the admin password, the system password, if set, is also deleted. The admin password can be used to delete the HDD password. For this reason, you cannot set an admin password if a system password or HDD password is already set. The admin password must be set first if an admin password is used with a system password and/or HDD password.
System Password	Allows you to set, change, and delete the system password.
Password Configuration	Allows you to control the rules when setting a password. The value of characters cannot be less than 4. Lower Caste Letter Upper Case Letter Digit Special Character All options are disabled by default. Minimum Characters (Set at 4 by default)
Password Bypass	This option lets you bypass the System (Boot) Password and the internal HDD password prompts during a system restart. Disabled — Always prompt for the system and internal HDD password when they are set. This option is enabled by default. Reboot Bypass — Bypass the password prompts on Restarts (warm boots). NOTE The system will always prompt for the system and internal HDD passwords when powered on from the off state (a cold boot). Also, the system will always prompt for passwords on any module bay HDDs that may be present.
Password Change	This option lets you determine whether changes to the System and Hard Disk passwords are permitted when an administrator password is set. TheAllow Non-Admin Password Changes option is enabled by default.
UEFI Capsule Firmware Updates	This option controls whether this system allows BIOS updates via UEFI capsule update packages. The Enable UEFI Capsule Firmware Updates option is selected by default. NOTE Disabling this option will block BIOS updates from services such as Microsoft Windows Update and Linux Vendor Firmware Service (LVFS)
PTT Security	PTT On (enabled by default) — This option allows you to control whether the Platform Trust technology (PTT) is visible to the operating system. NOTE Disabling this option does not change any settings you have made to the PTT, nor does it delete or change any information or keys you may have stored in the PTT. Changes to this setting take effect immediately. Clear — This setting clears the PTT owner information, and returns the PTT to the default state. Changes to this setting will be latched in BIOS after checking "apply", but will not take effect in the PTT until after exiting the BIOS setup menu. PPI Bypass for Clear Commands — This option controls the PTT Physical Presence Interface (PPI). When enabled, this setting will allow the OS to skip BIOS PPI user prompts when issuing the Clear command. Changes to this setting take effect immediately.
Absolute	This field lets you Enable, Disable or Permanently Disable the BIOS module interface of the optional Absolute Persistence Module service from Absolute Software. Enabled (enabled by default) — Enable the Absolute Persistence and load the firmware Persistence Module. Disabled — Disable Absolute Persistence. The firmware Persistence Module is not installed. Permanently Disabled — Permanently disables Absolute Persistence module interface from farther use. WARNING The Permanently Disabled option can only be selected once. When Permanently Disabled is selected, Absolute Persistence cannot be re-enabled. No further changes to the Enabled/Disabled state are allowed.
Admin Setup Lockout	Allows you to prevent users from entering Setup when an Admin password is set. This option is not set by default.
Master Password Lockout	Allows you to disable master password support. Hard Disk passwords need to be cleared before the settings can be changed. This option is not set by default.
SMM Security Mitigation	Allows you to enable or disable additional UEFI SMM Security Mitigation protections. This option is not set by default.