HP EliteBook 735 Sure Admin User Guide - Page 5

Getting started

Get HP EliteBook 735 PDF manuals and user guides View all HP EliteBook 735 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 5 highlights

1 Getting started HP Sure Admin enables IT administrators to securely manage sensitive device firmware settings using certificates and public key cryptography for both remote and local management of settings instead of a password. HP Sure Admin consists of the following pieces: ● Target PC: The platforms to manage that support Enhanced BIOS Authentication Mode. ● HP Manageability Integration Kit (MIK): The plug-in for System Center Configuration Manager (SCCM) or HP BIOS Configuration Utility (BCU) for remote management of the BIOS settings. ● HP Sure Admin Local Access Authenticator: A phone app that replaces the password to enable local access to the BIOS setup by scanning a QR code to obtain a one-time PIN. Using HP Sure Admin The process for using HP Sure Admin is as follows: 1. Open HP Sure Admin plug-in within the HP Manageability Integration Kit (MIK) plug-in for System Configuration Manager (SCCM) or Enhanced BIOS Configuration Utility (BCU). 2. Download the HP Sure Admin phone app from either Google PlayTM store or the Apple App Store®. 3. Create a key pair used by the target device and the HP Sure Admin phone app to obtain the one-time PIN to unlock BIOS. Disabling HP Sure Admin The following are the options to disable HP Sure Admin: ● In BIOS F10 setting, select Restore Security settings to Factory Defaults. NOTE: This requires physical presence by providing authentication PIN via the HP Sure Admin phone app to access the F10 settings . ● Use BCU command to remotely call WMI of Restore Security settings to Factory Defaults. NOTE: For more information, see the HP BIOS Configuration Utility (BCU) User Guide. ● In the MIK Security Provisioning page, select Deprovision. Using HP Sure Admin 1

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
1
Getting started
HP Sure Admin enables IT administrators to securely manage sensitive device
firmware
settings using
certificates
and public key cryptography for both remote and local management of settings instead of a
password.
HP Sure Admin consists of the following pieces:
●
Target PC:
The platforms to manage that support Enhanced BIOS Authentication Mode.
●
HP Manageability Integration Kit (MIK):
The plug-in for System Center
Configuration
Manager (SCCM)
or HP BIOS
Configuration
Utility (BCU) for remote management of the BIOS settings.
●
HP Sure Admin Local Access Authenticator:
A phone app that replaces the password to enable local
access to the BIOS setup by scanning a QR code to obtain a one-time PIN.
Using HP Sure Admin
The process for using HP Sure Admin is as follows:
1.
Open HP Sure Admin plug-in within the HP Manageability Integration Kit (MIK) plug-in for System
Configuration
Manager (SCCM) or Enhanced BIOS
Configuration
Utility (BCU).
2.
Download the HP Sure Admin phone app from either Google Play
TM
store or the Apple App Store
®
.
3.
Create a key pair used by the target device and the HP Sure Admin phone app to obtain the one-time PIN
to unlock BIOS.
Disabling HP Sure Admin
The following are the options to disable HP Sure Admin:
●
In BIOS F10 setting, select
Restore Security settings to Factory Defaults
.
NOTE:
This requires physical presence by providing authentication PIN via the HP Sure Admin phone
app to access the F10 settings .
●
Use BCU command to remotely call WMI of
Restore Security settings to Factory Defaults
.
NOTE:
For more information, see the HP BIOS
Configuration
Utility (BCU) User Guide.
●
In the MIK Security Provisioning page, select
Deprovision
.
Using HP Sure Admin
1