HP Engage Go 13.5 Maintenance and Service Guide - Page 69

Sure Start Security Event Policy. Controls HP Sure Start behavior upon identifying a critical, Option

Get HP Engage Go 13.5 PDF manuals and user guides View all HP Engage Go 13.5 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 69 highlights

Table 6-2 Computer Setup Security (continued) Option Description Security Configuration ● Sure Start Security Event Policy. Controls HP Sure Start behavior upon identifying a critical security event, such as any modification to HP firmware, while the operating system is running. - Log Event Only: HP Sure Start will log all critical security events in the HP Sure Start audio log within the HP Sure Start nonvolatile (flash) memory. - Log Event and notify user: In addition to logging all critical security events, HP Sure Start will notify the user within the operating system that a critical event has occurred. - Log Event and power off system: In addition to logging all critical security events, HP Sure Start turns off the computer upon detecting a HP Sure Start Security Event. Because of the potential for data loss, HP recommends this setting only in situations where security integrity of the system is a higher priority than the risk of potential data loss. ● Sure Start Security Event Boot Notification: Lets you enable a warning message on the startup screen if a Sure Start event, such as BIOS recovery or Memory intrusion, occurs. Secure Boot Configuration. Lets you be sure that an operating system is legitimate before booting to it, making Windows resistant to malicious modification from preboot to full operating system booting, preventing firmware attacks. UEFI and Windows Secure Boot only allow code signed by preapproved digital certificates to run during the firmware and OS boot process. NOTE: An administrator password must be set to activate this setting. Secure Boot must also be enabled. ● Secure Boot: Default is disabled. ● Secure Boot Key Management: Lets you manage the custom key settings. NOTE: Access to these settings requires Sure Start Secure Boot Keys Protection to be disabled. - Import Custom Secure Boot Keys: Default is disabled. - Clear Secure Boot keys: Lets you delete any previously loaded custom boot keys. Clearing keys will disable secure boot. Default is disabled. - Reset Secure Boot keys to factory defaults: Default is disabled. - Enable MS UEFI CA key: Disabling this setting alters the Secure Boot key list to further restrict the allowed software components. Set this option to disable to support Device Guard. Default is enabled. - Ready BIOS for Device Guard Use: Requires BIOS Administrator password to be configured and Secure Boot to be enabled. 62 Chapter 6 Computer Setup (F10) Utility

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
Table 6-2
Computer Setup Security
(continued)
Option
Description
Security Configuration
●
Sure Start Security Event Policy. Controls HP Sure Start behavior upon identifying a critical
security event, such as any modification to HP firmware, while the operating system is running.
–
Log Event Only: HP Sure Start will log all critical security events in the HP Sure Start audio
log within the HP Sure Start nonvolatile (flash) memory.
–
Log Event and notify user: In addition to logging all critical security events, HP Sure Start
will notify the user within the operating system that a critical event has occurred.
–
Log Event and power off system: In addition to logging all critical security events, HP Sure
Start turns off the computer upon detecting a HP Sure Start Security Event. Because of
the potential for data loss, HP recommends this setting only in situations where security
integrity of the system is a higher priority than the risk of potential data loss.
●
Sure Start Security Event Boot Notification: Lets you enable a warning message on the startup
screen if a Sure Start event, such as BIOS recovery or Memory intrusion, occurs.
Secure Boot Configuration
.
Lets you be sure that an operating system is legitimate before booting to it, making Windows
resistant to malicious modification from preboot to full operating system booting, preventing
firmware attacks. UEFI and Windows Secure Boot only allow code signed by preapproved digital
certificates to run during the firmware and OS boot process.
NOTE:
An administrator password must be set to activate this setting. Secure Boot must also be
enabled.
●
Secure Boot: Default is disabled.
●
Secure Boot Key Management: Lets you manage the custom key settings.
NOTE:
Access to these settings requires Sure Start Secure Boot Keys Protection to be
disabled.
–
Import Custom Secure Boot Keys: Default is disabled.
–
Clear Secure Boot keys: Lets you delete any previously loaded custom boot keys. Clearing
keys will disable secure boot. Default is disabled.
–
Reset Secure Boot keys to factory defaults: Default is disabled.
–
Enable MS UEFI CA key: Disabling this setting alters the Secure Boot key list to further
restrict the allowed software components. Set this option to disable to support Device
Guard. Default is enabled.
–
Ready BIOS for Device Guard Use: Requires BIOS Administrator password to be
configured and Secure Boot to be enabled.
62
Chapter 6
Computer Setup (F10) Utility