Another possibility:

As the executable code for setup is in ROM, it's possible to enter the setup routine from DOS by simply executing code from the correct address. (Which can be done from DEBUG with the command G=####:#)

The only problem is that the adress will be dependent upon the BIOS and I don't have a list. It might be available somewhere on the Net.