Administrator Password
|
The Administrator Password prevents unauthorized access to the BIOS Setup options. Once the administrator password is set, the BIOS setup options can only be modified after providing the correct password.
The following rules and dependencies apply to the Administrator Password -
- The administrator password cannot be set if computer and/or internal hard drive passwords are previously set.
- The administrator password can be used in place of the computer and/or internal hard drive passwords.
- When set, the administrator password must be provided during a firmware update.
- Clearing the administrator password also clears the computer password (if set).
Dell Technologies recommends using an administrator password to prevent unauthorized changes to BIOS setup options.
|
System Password
|
The System Password prevents the computer from booting to an operating system without entering the correct password.
The following rules and dependencies apply when the System Password is used -
- The computer shuts down when idle for approximately 10 minutes at the computer password prompt.
- The computer shuts down after three incorrect attempts to enter the computer password.
- The computer shuts down when the
Esc key is pressed at the System Password prompt.
- The computer password is not prompted when the computer resumes from standby mode.
Dell Technologies recommends using the computer password in situations where it is likely that a computer may be lost or stolen.
|
M.2 PCIe SSD-1
|
The M.2 PCIe SSD-1 Password can be set to prevent unauthorized access of the data stored on the solid-state drive. The computer prompts for the solid-state drive password during boot in order to unlock the drive. A password-secured solid-state drive stays locked even when removed from the computer or placed into another computer. It prevents an attacker from accessing data on the drive without authorization.
The following rules and dependencies apply when the M.2 PCIe SSD-1 Password is used -
- The solid-state drive password option cannot be accessed when a hard drive is disabled in the BIOS setup.
- The computer shuts down when idle for approximately 10 minutes at the solid-state drive password prompt.
- The computer shuts down after three incorrect attempts to enter the solid-state drive password and treats the hard drive as not available.
- The solid-state drive does not accept password unlock attempts after five incorrect attempts to enter the solid-state drive password from the BIOS Setup. The solid-state drive password must be reset for the new password unlock attempts.
- The computer treats the solid-state drive as not available when the
Esc key is pressed at the solid-state drive password prompt.
- The solid-state drive password is not prompted when the computer resumes from standby mode. When the solid-state drive is unlocked by the user before the computer goes into standby mode, it remains unlocked after the computer resumes from standby mode.
- If the computer and solid-state drive passwords are set to the same value, the solid-state drive unlocks after the correct computer password is entered.
Dell Technologies recommends using a solid-state drive password to protect unauthorized data access.
|
Password Configuration
|
The Password configuration page includes several options for changing the requirements of BIOS passwords. You can modify the minimum and maximum length of the passwords and require passwords to contain certain character classes (upper case, lower case, digit, special character).
Dell Technologies recommends setting the minimum password length to at least eight characters.
|
Upper Case Letter
|
The Upper Case Letter field enforces stricter rules for administrator and system passwords.
When enabled, the password is required to include at least one upper case letter.
By default, the
Upper Case Letter option is disabled.
|
Lower Case Letter
|
The Lower Case Letter field enforces stricter rules for administrator and system passwords.
When enabled, the password is required to include at least one lower case letter.
By default, the
Lower Case Letter option is disabled.
|
Digit
|
The Digit field enforces stricter rules for administrator and system passwords.
When enabled, the password is required to include at least one digit number.
By default, the
Digit option is disabled.
|
Special Character
|
The Special Character field enforces stricter rules for administrator and system passwords.
When enabled, the password is required to include at least one special character.
By default, the
Special Character option is disabled.
|
Minimum Characters
|
The Minimum Characters field enforces stricter rules for administrator and system passwords.
It allows you to set the minimum number of characters allowed for password.
By default, the
Minimum Characters option is set to 04.
|
Password Bypass
|
The
Password Bypass option allows the computer to reboot from the operating system without entering the computer or hard drive password. If the computer has already booted to the operating system, it is presumed that the user has already entered the correct computer or hard drive password.
NOTE:This option does not remove the requirement to enter the password after shutting down.
By default, the
Password Bypass option is disabled.
For additional security, Dell Technologies recommends keeping the
Password Bypass option enabled.
|
Password Changes
|
|
Allow Non-Admin Password Changes
|
The
Allow Non-Admin Password Changes option in BIOS setup allows an end user to set or change the computer or hard drive passwords without entering the administrator password. This gives an administrator control over the BIOS settings but enables an end user to provide their own password.
By default, the
Allow Non-Admin Password Changes option is enabled.
For additional security, Dell Technologies recommends keeping the
Allow Non-Admin Password Changes option disabled.
|
Admin Setup Lockout
|
The
Admin Setup Lockout option prevents an end user from even viewing the BIOS setup configuration without first entering the administrator password (if set).
|
Enable Admin Setup Lockout
|
By default, the
Enable Admin Setup Lockout option is disabled.
For additional security, Dell Technologies recommends keeping the
Enable Admin Setup Lockout option disabled.
|
Master Password Lockout
|
|
Enable Master Password Lockout
|
The Master Password Lockout setting allows you to disable the Recovery Password feature. If the computer, administrator, or hard drive password is forgotten, the computer becomes unusable.
NOTE:When the owner password is set, the Master Password Lockout option is not available.
NOTE: When an internal hard drive password is set, it must first be cleared before Master Password Lockout can be changed.
By default, the
Enable Master Password Lockout option is disabled.
For additional security, Dell Technologies does not recommend enabling the
Master Password Lockout unless you have implemented your own password recovery computer.
|
Allow Non-Admin PSID Revert
|
|
Enable Allow Non-Admin PSID Revert
|
Allows you to control access to the Physical Security ID (PSID) revert of NVMe hard-drives from the Dell Security Manager prompt.
When enabled, PSID revert is allowed to proceed without providing the BIOS Admin password.
By default, the
Enable Allow Non-Admin PSID Revert option is disabled.
|