Passwords
Some BIOS versions allow you to set up to 3 passwords for security: Supervisor/Admin, User/System, and Hard Disk Drive (HDD). These three passwords are disabled by default.
The User or System password restricts booting into the PC.
The Supervisor or Admin password restricts the user from accessing the BIOS settings unless they known the Supervisor/Admin password.
The HDD password si a password that must be entered before the user can access the hard drive.
Drive encryption
TPM
TPM stands for Trusted Platform Module. It’s an embedded security chip that stores encrypted passwords, keys, and digital certificates.
LoJack
LoJack is an anti theft service. After paying for this service, you download additional software which contacts the service’s servers to see if it was reported as stolen, and transmits system and GPS tracking information for the computer. LoJack makes use of TPM so that even formatting or replacing ghe hard drive will not bypass LoJack security.
Secure boot
If you are running Windows 8 or later with UEFI, then you can enable or disable Secure Boot in the firmware setup. Secure Boot helps to prevent malware and unauthorized operating systems from loading during the system boot process. If Secure Boot is enabled then you wont be able to enter firmware settings at startup. You’ll have to enter it through Windows.