HP Pro Mini 260 G9 Desktop PC Maintenance and Service Guide - Page 68

Computer Setup Security, continued, Table 6-2

Get HP Pro Mini 260 G9 Desktop PC PDF manuals and user guides View all HP Pro Mini 260 G9 Desktop PC manuals
Add to My Manuals
Save this manual to your list of manuals

Page 68 highlights

Table 6-2 Computer Setup Security (continued) Option Description ● Requires at least one symbol ● Requires at least one number ● Requires at least one uppercase character ● Requires at least one lowercase character ● Allow spaces Administrator Authentication Policies Lets you set limitations on some boot features restricting them to admin only, including: ● Prompt for administrator authorization to access: - Boot menu in POST - System Recovery - Network boot - BIOS update ● Allow the use of administrator credentials to modify the power-on password. Security Configuration TPM Embedded Security ● TPM Specification Version Displays the current TPM version. ● TPM Device Lets you set the Trusted Platform Module as available or hidden. Default is available. ● TPM State Select to enable the TPM. Default is disabled. ● Clear TPM Select to reset the TPM to an unowned state. After the TPM is cleared, it is also turned off. To temporarily suspend TPM operations, turn the TPM off instead of clearing it. Default is no. IMPORTANT: Clearing the TPM resets it to factory defaults and turns it off. You will lose all created keys and data protected by those keys. ● TPM Activation Policy ○ F1 to boot ○ Allow user to reject (default) ○ No prompts BIOS Sure Start ● Verify Boot Block on every boot: Select to enable HP Sure Start. Default is disabled. ● BIOS Data Recovery Policy: Select Automatic or Manual to determine data recovery process. Manual recovery is intended only for situations when you want forensic analysis before HP Sure Start recovery. When this policy is set to manual, HP Sure Start will not correct any issues that are found until the local user enters the manual recovery key sequence. This can result in a computer that cannot boot until the manual recovery key sequence is entered. Computer Setup Security 61

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
Table 6-2
Computer Setup Security
(continued)
Option
Description
●
Requires at least one symbol
●
Requires at least one number
●
Requires at least one uppercase character
●
Requires at least one lowercase character
●
Allow spaces
Administrator
Authentication Policies
Lets you set limitations on some boot features restricting them to admin only, including:
●
Prompt for administrator authorization to access:
–
Boot menu in POST
–
System Recovery
–
Network boot
–
BIOS update
●
Allow the use of administrator credentials to modify the power-on password.
Security Configuration
TPM Embedded Security
●
TPM Specification Version
Displays the current TPM version.
●
TPM Device
Lets you set the Trusted Platform Module as available or hidden. Default is available.
●
TPM State
Select to enable the TPM. Default is disabled.
●
Clear TPM
Select to reset the TPM to an unowned state. After the TPM is cleared, it is also turned off. To
temporarily suspend TPM operations, turn the TPM off instead of clearing it. Default is no.
IMPORTANT:
Clearing the TPM resets it to factory defaults and turns it off. You will lose all created
keys and data protected by those keys.
●
TPM Activation Policy
○
F1 to boot
○
Allow user to reject (default)
○
No prompts
BIOS Sure Start
●
Verify Boot Block on every boot: Select to enable HP Sure Start. Default is disabled.
●
BIOS Data Recovery Policy: Select Automatic or Manual to determine data recovery process. Manual
recovery is intended only for situations when you want forensic analysis before HP Sure Start
recovery. When this policy is set to manual, HP Sure Start will not correct any issues that are found
until the local user enters the manual recovery key sequence. This can result in a computer that
cannot boot until the manual recovery key sequence is entered.
Computer Setup Security
61