Dell T150 Emc Poweredge User Guide (+ PDF)

DELL T150 EMC PowerEdge User Guide

Notes, cautions, and warnings

NOTE: A NOTE indicates important information that helps you make better use of your product.

CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

Pre-operating system management Eapplications

You can manage basic settings and features of a system without booting to the operating system by using the system firmware.

Options to manage the pre-operating system applications

You can use any one of the following options to manage the pre-operating system applications:

System Setup
Dell Lifecycle Controller
Boot Manager
Preboot Execution Environment (PXE)

Topics:

System Setup
Dell Lifecycle Controller
Boot Manager
PXE boot

System Setup

Using the System Setup option, you can configure the BIOS settings, iDRAC settings, and device settings of the system. You can access system setup by using any one of the following interfaces:

Graphical User interface — To access go to iDRAC Dashboard, click Configurations > BIOS Settings.
Text browser — To enable the text browser, use the Console Redirection.

To view System Setup, power on the system, press F2, and click System Setup Main Menu.

NOTE: If the operating system begins to load before you press F2, wait for the system to finish booting, and then restart the system and try again.

The options on the System Setup Main Menu screen are described in the following table

Table 1. System Setup Main Menu

Option	Description
System BIOS	Enables you to configure the BIOS settings.
iDRAC Settings	Enables you to configure the iDRAC settings. The iDRAC settings utility is an interface to set up and configure the iDRAC parameters by using UEFI (Unified Extensible Firmware Interface). You can enable or disable various iDRAC parameters by using the iDRAC settings utility. For more information about this utility, see Integrated Dell Remote Access Controller User’s Guide at www.dell.com/ poweredgemanuals.
Device Settings	Enables you to configure device settings for devices such as storage controllers or network cards.
Service Tag Settings	Enables you to configure the System Service Tag.

System BIOS

To view the System BIOS screen, power on the system, press F2, and click System Setup Main Menu > System BIOS.

Table 2. System BIOS details

Option	Description
System Information	Provides information about the system such as the system model name, BIOS version, and Service Tag.
Memory Settings	Specifies information and options related to the installed memory.
Processor Settings	Specifies information and options related to the processor such as speed and cache size.
SATA Settings	Specifies options to enable or disable the integrated SATA controller and ports.
Boot Settings	Specifies options to specify the Boot mode (UEFI). Enables you to modify UEFI boot settings.
Network Settings	Specifies options to manage the UEFI network settings and boot protocols. Legacy network settings are managed from the Device Settings menu. NOTE: Network Settings are not supported in BIOS boot mode.
Integrated Devices	Specifies options to manage integrated device controllers and ports, specifies related features, and options.
Serial Communication	Specifies options to manage the serial ports, its related features, and options.
System Profile Settings	Specifies options to change the processor power management settings, memory frequency.
System Security	Specifies options to configure the system security settings, such as system password, setup password, Trusted Platform Module (TPM) security, and UEFI secure boot. It also manages the power button on the system.
Redundant OS Control	Sets the redundant OS information for redundant OS control.
Miscellaneous Settings	Specifies options to change the system date and time.

System Information

To view the System Information screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > System Information.

Table 3. System Information details

Option	Description
System Model Name	Specifies the system model name.
System BIOS Version	Specifies the BIOS version installed on the system.
System Management Engine Version	Specifies the current version of the Management Engine firmware.
System Service Tag	Specifies the system Service Tag.
System Manufacturer	Specifies the name of the system manufacturer.
System Manufacturer Contact Information	Specifies the contact information of the system manufacturer.
System CPLD Version	Specifies the current version of the system complex programmable logic device (CPLD) firmware.
UEFI Compliance Version	Specifies the UEFI compliance level of the system firmware.

Memory Settings

To view the Memory Settings screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > Memory Settings.

Table 4. Memory Settings details

Option	Description
System Memory Size	Specifies the size of the system memory.
System Memory Type	Specifies the type of memory installed in the system.
System Memory Speed	Specifies the speed of the system memory.
System Memory Voltage	Specifies the voltage of the system memory.
Video Memory	Specifies the size video memory.
System Memory Testing	Specifies whether the system memory tests are run during system boot. The two options available are Enabled and Disabled. This option is set to Disabled by default.
Memory Operating Mode	Specifies the memory operating mode. The option is available and is set to Optimizer Mode, by default.
Current State of Memory Operating Mode	Specifies the current state of the memory operating mode.
Memory training	When option is set to Fast and memory configuration is not changed, the system uses previously saved memory training parameters to train the memory subsystems and system boot time is also reduced. If memory configuration is changed, the system automatically enables Retrain at Next boot to force one-time full memory training steps, and then go back to Fast afterward. When option is set to Retrain at Next boot, the system performs the force one-time full memory training steps at next power on and boot time is slowed on next boot. When option is set to Enabled, the system performs the force full memory training steps on every power on and boot time is slowed on every boot.
Correctable Error Logging	Enables or disables correctable error logging. This option is set to Enabled by default.

Processor Settings

To view the Processor Settings screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > Processor Settings.

Table 5. Processor Settings details

Option	Description
Logical Processor	Each processor core supports up to two logical processors. If this option is set to Enabled, the BIOS displays all the logical processors. If this option is set to Disabled, the BIOS displays only one logical processor per core. This option is set to Enabled by default.
Virtualization Technology	Enables or disables the virtualization technology for the processor. This option is set to Enabled by default.
Adjacent Cache Line Prefetch	Optimizes the system for applications that need high utilization of sequential memory access. This option is set to Enabled by default. You can disable this option for applications that need high utilization of random memory access.
Hardware Prefetcher	Enables or disables the hardware prefetcher. This option is set to Enabled by default.
LLC Prefetch	Enables or disables the LLC Prefetch on all threads. This option is set to Enabled by default.
Dead Line LLC Alloc	Enables or disables the Dead Line LLC Alloc. This option is set to Enabled by default. You can enable this option to enter the dead lines in LLC or disable the option to not enter the dead lines in LLC.
Directory AtoS	Enables or disables the Directory AtoS. AtoS optimization reduces remote read latencies for repeat read accesses without intervening writes. This option is set to Disabled by default.
x2APIC Mode	Enables or disables x2APIC mode. This option is set to Enabled by default. NOTE: For two processors 64 cores configuration, x2APIC mode is not switchable if 256 threads are enabled (BIOS settings: All CCD, cores, and logical processors enabled).
Number of Cores per Processor	This option is set to All by default.
Processor Core Speed	Specifies the maximum core frequency of the processor.

Table 6. Processor details

Option	Description
Family-Model-Stepping	Specifies the family, model, and stepping of the processor as defined by Intel.
Brand	Specifies the brand name.
Level 2 Cache	Specifies the total L2 cache.
Level 3 Cache	Specifies the total L3 cache.
Microcode	Specifies the processor microcode version.

SATA Settings

To view the SATA Settings screen, power on the system, press F2, and click .System BIOS > SATA Settings.

Table 7. SATA Settings details

Option

Description

Embedded SATA

Enables the embedded SATA option to be set to Off, AHCI mode , or RAID modes. This option is set to AHCI Mode by default.

NOTE:

1. No ESXi and Ubuntu OS support under RAID mode.

Security Freeze Lock

Sends Security Freeze Lock command to the embedded SATA drives during POST. This option is applicable only for AHCI Mode. This option is set to Enabled by default.

Write Cache

Enables or disables the command for the embedded SATA drives during POST. This option is set to Disabled by default.

Port n

Sets the drive type of the selected device.

For AHCI Mode or RAID modes, BIOS support is always enabled.

Table 8. Port n

Options	Descriptions
Model	Specifies the drive model of the selected device
Drive Type	Specifies the type of drive attached to the SATA port
Capacity	Specifies the total capacity of the drive. This field is undefined for removable media devices such as optical drives.

Boot Settings

The Boot Settings only support UEFI mode.

UEFI: The Unified Extensible Firmware Interface (UEFI) is a new interface between operating systems and platform firmware. The interface consists of data tables with platform related information, boot and runtime service calls that are available to the operating system and its loader. The following benefits are available when the Boot Mode is set to UEFI:
- Support for drive partitions larger than 2 TB.
- Enhanced security (e.g., UEFI Secure Boot).
- Faster boot time.

To view the Boot Settings screen, power on the system, press F2, and click System BIOS > Boot Setting

Table 9. Boot Settings details

Option

Description

Boot Sequence Retry

Enables or disables the Boot sequence retry feature or resets the system. When If this option is set to Enabled and the system fails to boot, the system re-attempts the boot sequence after 30 seconds. When this option is set to Reset and the system fails to boot, the system reboots immediately. This option is set to Enabled by default.

Generic USB Boot

Enables or disables the generic USB boot placeholder. This option is set to

Disabled by default.

Hard-disk Drive Placeholder

Enables or disables the Hard-disk drive placeholder. This option is set to Disabled

by default.

Clean all Sysprep order and variables

When this option is set to None, BIOS will do nothing. When set to Yes, BIOS will delete variables of SysPrep #### and SysPrepOrder this option is a onetime option, will reset to none when deleting variables. This setting is only available in UEFI Boot Mode. This option is set to None by default.

UEFI Boot Settings

Specifies the UEFI boot sequence. Enables or disables UEFI Boot options.

NOTE: This option controls the UEFI boot order. The first option in the list will be attempted first.

Table 10. UEFI Boot Settings

Option	Description
UEFI Boot Sequence	Enables you to change the boot device order.
Boot Options Enable/Disable	Enables you to select the enabled or disabled boot devices

Changing boot order

About this task
You may have to change the boot order if you want to boot from a USB key or an optical drive.
Steps

On the System Setup Main Menu screen, click System BIOS > Boot Settings > UEFI Boot Settings > UEFI Boot Sequence.
Use the arrow keys to select a boot device, and use the plus (+) and minus (-) sign keys to move the device down or up in the order.
Click Exit, and then click Yes to save the settings on exit.
NOTE: You can also enable or disable boot order devices as needed.

Network Settings

To view the Network Settings screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > Network Settings.
NOTE: Network Settings are not supported in BIOS boot mode.

Table 11. Network Settings details

Option	Description
UEFI PXE Settings	Enables you to control the configuration of the UEFI PXE device.
PXE Device n (n = 1 to 4)	Enables or disables the device. When enabled, a UEFI PXE boot option is created for the device.
PXE Device n Settings(n = 1 to 4)	Enables you to control the configuration of the PXE device.
UEFI HTTP Settings	Enables you to control the configuration of the UEFI HTTP device.
HTTP Device n (n = 1 to 4)	Enables or disables the device. When enabled, a UEFI HTTP boot option is created for the device.
HTTP Device n Settings (n = 1 to 4)	Enables you to control the configuration of the HTTP device.
UEFI iSCSI Settings	Enables you to control the configuration of the iSCSI device.

Table 12. PXE Device n Settings details

Option	Description
Interface	Specifies NIC interface used for the PXE device.
Protocol	Specifies Protocol used for PXE device. This option is set to IPv4 or IPv6. This option is set to IPv4 by default.
Vlan	Enables Vlan for PXE device. This option is set to Enable or Disable. This option is set to Disable by default.
Vlan ID	Shows the Vlan ID for the PXE device
Vlan Priority	Shows the Vlan Priority for the PXE device.

Table 13. UEFI iSCSI Settings screen details

Option	Description
iSCSI Initiator Name	Specifies the name of the iSCSI initiator in IQN format.
iSCSI Device1	Enables or disables the iSCSI device. When disabled, a UEFI boot option is created for the iSCSI device automatically. This is set to Disabled by default.
iSCSI Device1 Settings	Enables you to control the configuration of the iSCSI device.

Table 14. ISCSI Device1 Settings screen details

Option	Description
Connection 1	Enables or disables the iSCSI connection. This option is set to Disable by default.
Connection 2	Enables or disables the iSCSI connection. This option is set to Disable by default.
Connection 1 Settings	Enables you to control the configuration for the iSCSI connection.
Connection 2 Settings	Enables you to control the configuration for the iSCSI connection.
Connection Order	Enables you to control the order for which the iSCSI connections will be attempted.

Integrated Devices

To view the Integrated Devices screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > Integrated Devices.

Table 15. Integrated Devices details

Option	Description
User Accessible USB Ports	Configures the user accessible USB ports. Selecting Only Back Ports On disables the front USB ports; selecting All Ports Off disables all front and back USB ports. This option is set to All Ports On by default.
User Accessible USB Ports	The USB keyboard and mouse still function in certain USB ports during the boot process, depending on the selection. After the boot process is complete, the USB ports will be enabled or disabled as per the setting.
Internal USB Port	Enables or disables the internal USB port. This option is set to On or Off. This option is set to On by default. NOTE: Internal USB port is only effective for T150, but T350/R350/R250 are not because hardware does not support.
iDRAC Direct USB Port	The iDRAC Direct USB port is managed by iDRAC exclusively with no host visibility. This option is set to ON or OFF. When set to OFF, iDRAC does not detect any USB devices installed in this managed port. This option is set to On by default.
Embedded NIC1 and NIC2	Enables or disables the Embedded NIC1 and NIC2. If set to Disabled (OS), the NIC may still be available for shared network access by the embedded management controller. Configure the Embedded NIC1 and NIC2 option by using the NIC management utilities of the system. This option is set to Enabled by default.
I/OAT DMA Engine	Enables or disables the I/O Acceleration Technology (I/OAT) option. I/OAT is a set of DMA features designed to accelerate network traffic and lower CPU utilization. Enable only if the hardware and software support the feature. This option is set to Disabled by default.
Embedded Video Controller	Enables or disables the use of Embedded Video Controller as the primary display. When set to Enabled, the Embedded Video Controller will be the primary display even if add-in graphic cards are installed. When set to Disabled, an add-in graphics card is used as the primary display. BIOS will output displays to both the primary add-in video and the embedded video during POST and preboot environment. The embedded video will then be disabled right before the operating system boots. This option is set to Enabled by default. NOTE: When there are multiple add-in graphic cards installed in the system, the first card discovered during PCI enumeration is selected as the primary video. You might have to rearrange the cards in the slots in order to control which card is the primary video.
Current State of Embedded Video Controller	Displays the current state of the embedded video controller. The Current State of Embedded Video Controller option is a read-only field. If the Embedded Video Controller is the only display capability in the system (that is, no add-in graphics card is installed), then the Embedded Video Controller is automatically used as the primary display even if the Embedded Video Controller setting is set to Disabled.
OS Watchdog Timer	If your system stops responding, this watchdog timer aids in the recovery of your operating system. When this option is set to Enabled, the operating system initializes the timer. When this option is set to Disabled (the default), the timer does not have any effect on the system.
Empty Slot Unhide	Enables or disables the root ports of all the empty slots that are accessible to the BIOS and operating system. This option is set to Disabled by default.
Memory Mapped I/O above 4 GB	Enables or disables the support for the PCIe devices that need large amounts of memory. Enable this option only for 64-bit operating systems. This option is set to Enabled by default.
Slot Disablement	Enables or disables the available PCIe slots on your system. The slot disablement feature controls the configuration of the PCIe cards installed in the specified slot. Slots must be disabled only when the installed peripheral card prevents booting into the operating system or causes delays in system startup. If the slot is disabled, both the Option ROM and UEFI drivers are disabled. Only slots that are present on the system will be available for control.

Serial Communication

To view the Serial Communication screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > Serial Communication

Table 16. Serial Communication details

Option	Description
Serial Communication	Enables the serial communication options. Selects serial communication devices (Serial Device 1 and Serial Device 2) in BIOS. BIOS console redirection can also be enabled, and the port address can be specified.
Serial Port Address	Enables you to set the port address for serial devices. This option is set to Serial Device1=COM2, Serial Device 2=COM1 by default. NOTE: You can use only Serial Device 2 for the Serial Over LAN (SOL) feature. To use console redirection by SOL, configure the same port address for console redirection and the serial device. NOTE: Every time the system boots, the BIOS syncs the serial MUX setting that is saved in iDRAC. The serial MUX setting can independently be changed in iDRAC. Loading the BIOS default settings from within the BIOS setup utility may not always revert the serial MUX setting to the default setting of Serial Device 1.
External Serial Connector	Enables you to associate the External Serial Connector to Serial Device 1, Serial Device 2, or the Remote Access Device by using this option. This option is set to Serial Device 1 by default. NOTE: Only Serial Device 2 can be used for Serial Over LAN (SOL). To use console redirection by SOL, configure the same port address for console redirection and the serial device. NOTE: Every time the system boots, the BIOS syncs the serial MUX setting saved in iDRAC. The serial MUX setting can independently be changed in iDRAC. Loading the BIOS default settings from within the BIOS setup utility may not always revert this setting to the default setting of Serial Device 1.
Failsafe Baud Rate	Specifies the failsafe baud rate for console redirection. The BIOS attempts to determine the baud rate automatically. This failsafe baud rate is used only if the attempt fails, and the value must not be changed. This option is set to 115200 by default.
Remote Terminal Type	Sets the remote console terminal type. This option is set to VT100/VT220 by default.
Redirection After Boot	Enables or disables the BIOS console redirection when the operating system is loaded. This option is set to Enabled by default.

System Profile Settings

To view the System Profile Settings screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > System Profile Settings.

Table 17. System Profile Settings details

Option	Description
System Profile	Sets the system profile. If you set the System Profile option to a mode other than Custom, the BIOS automatically sets the rest of the options. You can only change the rest of the options if the mode is set to Custom. This option is set to Performance Per Watt (OS) by default. Other options include Performance and Custom. NOTE: All the parameters on the system profile setting screen are available only when the System Profile option is set to Custom.
CPU Power Management	Sets the CPU power management. This option is set to OS DBPM by default. Other option includes Maximum Performance.
Memory Frequency	Sets the speed of the system memory. This option is set to Maximum Performance by default.
Turbo Boost	Enables or disables the processor to operate in the turbo boost mode. This option is set to Enabled by default.
C1E	Enables or disables the processor to switch to a minimum performance state when it is idle. This option is set to Enabled by default.
C States	Enables or disables the processor to operate in all available power states. C States allow the processor to enter lower power states when idle. When set to Enabled (OS controlled) or when set to Autonomous (if hardware controlled is supported), the processor can operate in all available Power States to save power, but may increase memory latency and frequency jitter. This option is set to Enabled by default.
Memory Refresh Rate	Sets the memory refresh rate to either 1x or 2x. This option is set to 1x by default.
Uncore Frequency	Enables you to select the Uncore Frequency option. Dynamic mode enables the processor to optimize power resources across cores and uncores during runtime. The optimization of the uncore frequency to either save power or optimize performance is influenced by the setting of the Energy Efficiency Policy option.
Monitor/Mwait	Enables the Monitor/Mwait instructions in the processor. This option is set to Enabled for all system profiles, except Custom by default. NOTE: This option can be disabled only if the C States option in the Custom mode is set to disabled. NOTE: When C States is set to Enabled in the Custom mode, changing the Monitor/ Mwait setting does not impact the system power or performance.
PCI ASPM L1 Link Power Management	Enables or disables the PCI ASPM L1 Link Power Management. This option is set to Enabled by default.

System Security

To view the System Security screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > System Security

Table 18. System Security details

Option	Description
CPU AES-NI	Improves the speed of applications by performing encryption and decryption by using the Advanced Encryption Standard Instruction Set (AES-NI). This option is set to Enabled by default.
System Password	Sets the system password. This option is set to Enabled by default and is read-only if the password jumper is not installed in the system.
Setup Password	Sets the setup password. This option is read-only if the password jumper is not installed in the system.
Password Status	Locks the system password. This option is set to Unlocked by default.
TPM Information	Indicates the type of Trusted Platform Module, if present.

Table 19. TPM 2.0 security information

	Option		Description
	TPM Information
	TPM Security		NOTE: The TPM menu is available only when the TPM module is installed. Enables you to control the reporting mode of the TPM. The TPM Security option is set to Off by default. When TPM 2.0 is installed, the TPM Security option is set to On or Off. This option is set to Off by default.
	TPM Information		Displays the operational state of the TPM.
	TPM Firmware		Indicates the firmware version of the TPM.
	TPM Hierarcy		Enables, disables, or clears the storage and endorsement hierarchies. When set to Enabled, the storage and endorsement hierarchies can be used. When set to Disabled, the storage and endorsement hierarchies cannot be used. When set to Clear, the storage and endorsement hierarchies are cleared of any values, and then reset to Enabled.
TPM Advanced Settings		TPM PPI Bypass Provision		When set to Enabled, allows the Operating System to bypass Physical Presence Interface (PPI) prompts when issuing PPI Advanced Configuration and Power interface (ACPI) provisioning operations.
		TPM PPI Bypass Clear		When set to Enabled allows the Operating System to bypass Physical Presence Interface (PPI) prompts when issuing PPI Advanced Configuration and Power Interface (ACPI) clear operations.
		TPM2 Algorith m Selection		Allows the user to change the cryptographic algorithms used in the Trusted Platform Module (TPM). The available options are dependent on the TPM firmware. To enable TPM2 Algorithm Selection, Intel(R) TXT technology must be disabled.
				The TPM2 Algorithm Selection option supports SHA1, SHA128, SHA256, SHA512 and SM3 by detecting the TPM module. This option is set to SHA1 by default.

Table 20. System Security details

Option

Description

Intel(R) TXT

Enables you to set the Intel Trusted Execution Technology (TXT) option. To enable

the Intel TXT option, virtualization technology and TPM Security must be enabled with Pre-boot measurements for TPM 1.2 or set to On with SHA256 algorithm for TPM

2.0. This option is set to Off by default. It is set On for Secure Launch (Firmware Protection) support on Windows 2022.

Intel(R) SGX

Enables you to set the Intel Software Guard Extension (SGX) option. To enable the Intel SGX option, processor must be SGX capable, memory population must be compatible (minimum x8 identical DIMM1 to DIMM8 per CPU socket, not support on persistent memory configuration), memory operating mode must be set at optimizer mode, memory encryption must be enabled and node interleaving must be disabled. This option is set to Off by default. When this option is to Off, BIOS disables the SGX technology. When this option is to On, BIOS enables the SGX technology.

NOTE: When upgrading from an earlier BIOS version to BIOS 1.7.4, the SGX feature will be disabled. In the “SGX Factory Reset” menu in the “System Security” setup menu, the user must first re-enable SGX with a factory reset.

Software Guard Extensions Epoch n: Sets the Software Guard Extensions Epoch values.

Enables or disables the power button on the front of the system. This option is set to Disabled by default.

SGX LE Public Key Hash0: Sets the bytes from 0-7 for SGX Launch Enclave Public Key Hash.

SGX LE Public Key Hash1: Sets the bytes from 8-15 for SGX Launch Enclave Public Key Hash.

SGX LE Public Key Hash2: Sets the bytes from 16-23 for SGX Launch Enclave Public Key Hash.

SGX LE Public Key Hash3: Sets the bytes from 24-31 for SGX Launch Enclave Public Key Hash.

Power Button

AC Power Recovery

Sets how the system behaves after AC power is restored to the system. This option is set to Last by default.

NOTE: The host system will not power on up until iDRAC Root of Trust (RoT) is completed, host power on will be delayed by minimum 90 seconds after the AC applied.

AC Power Recovery Delay

Sets the time delay for the system to power up after AC power is restored to

the system. This option is set to Immediate by default. When this option is set to Immediate, there is no delay for power up. When this option is set to Random, the system creates a random delay for power up. When this option is set to User Defined, the system delay time is manually to power up.

User Defined Delay (60 s to 600 s)

Sets the User Defined Delay option when the User Defined option for AC Power Recovery Delay is selected. The actual AC recovery time needs to add iDRAC root of trust time (around 50 seconds).

UEFI Variable Access

Provides varying degrees of securing UEFI variables. When set to Standard (the default), UEFI variables are accessible in the operating system per the UEFI specification. When set to Controlled, selected UEFI variables are protected in the environment and new UEFI boot entries are forced to be at the end of the current boot order.

In-Band Manageability Interface

When set to Disabled , this setting hides the Management Engine’s (ME), HECI devices, and the system’s IPMI devices from the operating system. This prevents the operating system from changing the ME power capping settings, and blocks access to all in-

band management tools. All management should be managed through out-of-band. This option is set to Enabled by default.

NOTE: BIOS update requires HECI devices to be operational and DUP updates require IPMI interface to be operational. This setting needs to be set to Enabled to avoid updating errors.

SMM Security Migration

Enables or disables the UEFI SMM security migration protections. It is enabled for Windows 2022 support.

Secure Boot

Enables Secure Boot, where the BIOS authenticates each pre-boot image by using the certificates in the Secure Boot Policy. Secure Boot is set to Disabled by default.

Secure Boot Policy

When Secure Boot policy is set to Standard, the BIOS uses the system manufacturer’s key and certificates to authenticate pre-boot images. When Secure Boot policy is set to Custom, the BIOS uses the user-defined key and certificates. Secure Boot policy is set to Standard by default.

Secure Boot Mode

Configures how the BIOS uses the Secure Boot Policy Objects (PK, KEK, db, dbx).

If the current mode is set to Deployed Mode, the available options are User Mode and Deployed Mode. If the current mode is set to User Mode, the available options are User Mode, Audit Mode, and Deployed Mode.

Table 21. Secure Boot Mode

Options	Descriptions
User Mode	In User Mode, PK must be installed, and BIOS performs signature verification on programmatic attempts to update policy objects. The BIOS allows unauthenticated programmatic transitions between modes.
Audit mode	In Audit Mode, PK is not present. BIOS does not authenticate programmatic update to the policy objects and transitions between modes. The BIOS performs a signature verification on pre-boot images and logs the results in the image Execution Information Table, but executes the images whether they pass or fail verification. Audit Mode is useful for programmatic determination of a working set of policy objects.
Deployed Mode	Deployed Mode is the most secure mode. In Deployed Mode, PK must be installed and the BIOS performs signature verification on programmatic attempts to update policy objects. Deployed Mode restricts the programmatic mode transitions

Secure Boot Policy Summary

Specifies the list of certificates and hashes that secure boot uses to authenticate images.

Secure Boot Custom Policy Settings

Configures the Secure Boot Custom Policy. To enable this option, set the Secure Boot Policy to Custom option.

Creating a system and setup password

Prerequisites

Ensure that the password jumper is enabled. The password jumper enables or disables the system password and setup password features. For more information, see the System board jumper settings section.

NOTE: If the password jumper setting is disabled, the existing system password and setup password are deleted and you need not provide the system password to boot the system.

Steps

To enter System Setup, press F2 immediately after turning on or rebooting your system.
On the System Setup Main Menu screen, click System BIOS > System Security.
On the System Security screen, verify that Password Status is set to Unlocked.
In the System Password field, type your system password, and press Enter or Tab. Use the following guidelines to assign the system password:
- A password can have up to 32 characters.
  A message prompts you to reenter the system password.
Reenter the system password, and click OK.
In the Setup Password field, type your setup password and press Enter or Tab. A message prompts you to reenter the setup password.
Reenter the setup password, and click OK.
Press Esc to return to the System BIOS screen. Press Esc again. A message prompts you to save the changes.
NOTE: Password protection does not take effect until the system reboots.

Using your system password to secure your system

About this task

If you have assigned a setup password, the system accepts your setup password as an alternate system password.

Steps

Turn on or reboot your system.
Type the system password and press Enter.

Next steps

When Password Status is set to Locked, type the system password and press Enter when prompted at reboot.

NOTE: If an incorrect system password is typed, the system displays a message and prompts you to reenter your password. You have three attempts to type the correct password. After the third unsuccessful attempt, the system displays an error message that the system has stopped functioning and must be turned off. Even after you turn off and restart the system, the error message is displayed until the correct password is entered.

Deleting or changing system and setup password

Prerequisites

NOTE: You cannot delete or change an existing system or setup password if the Password Status is set to Locked

Steps

To enter System Setup, press F2 immediately after turning on or restarting your system.
On the System Setup Main Menu screen, click System BIOS > System Security.
On the System Security screen, ensure that Password Status is set to Unlocked.
In the System Password field, alter or delete the existing system password, and then press Enter or Tab.
In the Setup Password field, alter or delete the existing setup password, and then press Enter or Tab. If you change the system and setup password, a message prompts you to reenter the new password. If you delete the system and setup password, a message prompts you to confirm the deletion.
Press Esc to return to the System BIOS screen. Press Esc again, and a message prompts you to save the changes.
elect Setup Password, change, or delete the existing setup password and press Enter or Tab.
NOTE: If you change the system password or setup password, a message prompts you to reenter the new password. If you delete the system password or setup password, a message prompts you to confirm the deletion.

Operating with setup password enabled

If Setup Password is set to Enabled, type the correct setup password before modifying the system setup options.

If you do not type the correct password in three attempts, the system displays the following message:

Even after you power off and restart the system, the error message is displayed until the correct password is typed. The following options are exceptions

If System Password is not set to Enabled and is not locked through the Password Status option, you can assign a system password. For more information, see the System Security Settings screen section.
You cannot disable or change an existing system password.
NOTE: You can use the password status option with the setup password option to protect the system password from unauthorized changes.

Redundant OS Control

To view the Redundant OS Control screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > Redundant OS Control

Table 22. Redundant OS Control details

Option	Description
Redundant OS Location	Enables you to select a backup disk from the following devices: None BOSS PCIe Cards (Internal M.2 Drives) SATA Port A
Redundant OS State	NOTE: This option is disabled if Redundant OS Location is set to None. When set to Visible, the backup disk is visible to the boot list and OS. When set to Hidden, the backup disk is disabled and is not visible to the boot list and OS. This option is set to Visible by default. NOTE: BIOS disables the device in hardware, so it is not accessed by the OS.
Redundant OS Boot	NOTE: This option is disabled if Redundant OS Location is set to None or if Redundant OS State is set to Hidden. When set to Enabled, BIOS boots to the device specified in Redundant OS Location. When set to Disabled, BIOS preserves the current boot list settings. This option is set to Disabled by default.

Miscellaneous Settings

To view the Miscellaneous Settings screen, power on the system, press F2, and click System Setup Main Menu > System BIOS > Miscellaneous Settings

Table 23. Miscellaneous Settings details

Option	Description
System Time	Enables you to set the time on the system.
System Date	Enables you to set the date on the system.
Asset Tag	Specifies the asset tag and enables you to modify it for security and tracking purposes.
Keyboard NumLock	Enables you to set whether the system boots with the NumLock enabled or disabled. This option is set to On by default. NOTE: This option does not apply to 84-key keyboards.
F1/F2 Prompt on Error	Enables or disables the F1/F2 prompt on error. This option is set to Enabled by default. The F1/F2 prompt also includes keyboard errors.
Dell Wyse P25/P45 BIOS Access	Enables or disables the Dell Wyse P25/P45 BIOS Access. This option is set to Enabled by default.
Power Cycle Request	Enables or disables the Power Cycle Request. This option is set to None by default.

iDRAC Settings

The iDRAC settings is an interface to set up and configure the iDRAC parameters by using UEFI. You can enable or disable various iDRAC parameters by using the iDRAC settings.

NOTE: Accessing some of the features on the iDRAC settings needs the iDRAC Enterprise License upgrade.

For more information about using iDRAC, see Dell Integrated Dell Remote Access Controller User’s Guide at https://www.dell.com/idracmanuals.

Device Settings

Device Settings enables you to configure device parameters such as storage controllers or network cards.

Service Tag Settings

Service Tag Settings enables you to configure the System Service Tag.

Dell Lifecycle Controller

Dell Lifecycle Controller (LC) provides advanced embedded systems management capabilities including system deployment, configuration, update, maintenance, and diagnosis. LC is delivered as part of the iDRAC out-of-band solution and Dell system embedded Unified Extensible Firmware Interface (UEFI) applications.

Embedded system management

The Dell Lifecycle Controller provides advanced embedded system management throughout the lifecycle of the system. The Dell Lifecycle Controller is started during the boot sequence and functions independently of the operating system.

NOTE: Certain platform configurations may not support the full set of features provided by the Dell Lifecycle Controller.

For more information about setting up the Dell Lifecycle Controller, configuring hardware and firmware, and deploying the operating system, see the Dell Lifecycle Controller documentation at https://www.dell.com/idracmanuals.

Boot Manager

The Boot Manager option enables you to select boot options and diagnostic utilities.
To enter Boot Manager, power on the system and press F11.

Table 24. Boot Manager details

Option	Description
Continue Normal Boot	The system attempts to boot to devices starting with the first item in the boot order. If the boot attempt fails, the system continues with the next item in the boot order until the boot is successful or no more boot options are found.
One-shot Boot Menu	Enables you to access boot menu, where you can select a one-time boot device to boot from.
Launch System Setup	Enables you to access System Setup.
Launch Lifecycle Controller	Exits the Boot Manager and invokes the Dell Lifecycle Controller program.
System Utilities	Enables you to launch System Utilities menu such as Launch Diagnostics, BIOS update File Explorer, Reboot System.

PXE boot

You can use the Preboot Execution Environment (PXE) option to boot and configure the networked systems remotely.

To access the PXE boot option, boot the system and then press F12 during POST instead of using standard Boot Sequence from BIOS Setup. It does not pull any menu or allows managing of network devices.