Home » HP Manuals » Desktops » HP Pro Mini 260 G9 Desktop PC » Manual Viewer

HP Pro Mini 260 G9 Desktop PC Maintenance and Service Guide - Page 69

Sure Start Secure Boot Keys Protection: Saves a backup copy of Secure Boot Keys so that they can

View all HP Pro Mini 260 G9 Desktop PC manuals

Add to My Manuals
Save this manual to your list of manuals

Page 69 highlights

Table 6-2 Computer Setup Security (continued) Option Description ● Network Controller Configuration Restore: Select to restore the network controller parameters to the factory state saved in the HP Sure Start Private nonvolatile (flash) memory. This setting is available only on computers with built-in NIC. NOTE: This process can take up to 30 seconds. You need to restore this only when the Network Controller Configuration mismatch warning is set. ● Dynamic Runtime Scanning of Boot Block: Verifies the integrity of the BIOS boot block region several times each hour while the computer is running. Default is enabled. ● Sure Start BIOS Settings Protection: When enabled, HP Sure Start locks all critical BIOS settings and provides enhanced protection for these settings using nonvolatile (flash) memory. Default is off. NOTE: An administrator password must be set to activate this setting. ● Sure Start Secure Boot Keys Protection: Saves a backup copy of Secure Boot Keys so that they can be recovered if someone attempts to alter them in an unauthorized manner. ● Enhanced HP Firmware Runtime Intrusion Prevention and Detection: Enables monitoring of HP system firmware executing out of main memory while the operating system is running. Any anomalies detected in HP system firmware that is active while the operating system is running will result in a Sure Start security event being generated. ● Sure Start Security Event Policy. Controls HP Sure Start behavior upon identifying a critical security event (any modification to HP firmware) while the operating system is running. - Log Event Only: HP Sure Start will log all critical security events in the HP Sure Start audio log within the HP Sure Start nonvolatile (flash) memory. - Log Event and notify user: In addition to logging all critical security events, HP Sure Start will notify the user within the operating system that a critical event has occurred. - Log Event and power off system: In addition to logging all critical security events, HP Sure Start turns of the computer upon detecting a HP Sure Start Security Event. Because of the potential for data loss, HP recommends this setting only in situations where security integrity of the system is a higher priority than the risk of potential data loss. ● Sure Start Security Event Boot Notification: Lets you enable a warning message on the startup screen if there is a Sure Start event (BIOS recovery, Memory intrusion, etc.) Secure Boot Configuration. Lets you be sure that an operating system is legitimate before booting to it, making Windows resistant to malicious modification from preboot to full operating system booting, preventing firmware attacks. UEFI and Windows Secure Boot only allow code signed by preapproved digital certificates to run during the firmware and OS boot process. NOTE: An administrator password must be set to activate this setting. Secure Boot must also be enabled. ● Secure Boot: Default is disabled. ● Secure Boot Key Management: Lets you manage the custom key settings. NOTE: Access to these settings requires Sure Start Secure Boot Keys Protection to be disabled. Import Custom Secure Boot Keys: Default is disabled. Clear Secure Boot keys: Lets you delete any previously loaded custom boot keys. Clearing keys will disable secure boot. Default is disabled. Reset Secure Boot keys to factory defaults: Default is disabled. Enable MS UEFI CA key: Disabling this setting alters the Secure Boot key list to further restrict the allowed software components. Set this option to disable to support Device Guard. Default is enabled. 62 Chapter 6 Computer Setup (F10) Utility

Section	Page
Computer features	8
Standard configuration features	8
Front panel components	8
Rear panel components	9
Serial number location	10
Illustrated parts catalog	11
Computer major components	11
Miscellaneous parts	13
Routine care, drive guidelines, and disassembly preparation	15
Electrostatic discharge information	15
Generating static electricity	15
Preventing electrostatic damage to equipment	16
Personal grounding methods and equipment	16
Grounding the work area	17
Recommended materials and equipment	17
Operating guidelines	18
Routine care	18
General cleaning safety precautions	18
Cleaning the computer case	19
Cleaning the keyboard	19
Cleaning the monitor	19
Cleaning the mouse	20
Service considerations	20
Tools and software requirements	20
Screws	20
Cables and connectors	20
Hard drives	20
Lithium coin cell battery	21
SATA hard drives	21
Cable management	22
Removal and replacement procedures	23
Preparation for disassembly	23
Access panel	23
Front bezel	24
Memory modules (SODIMMs)	25
Fan	28
Ambient (thermal) sensor	29
Hard drive and drive cage	30
Solid-state drive	31
WLAN module	33
Battery	35
Speaker	36
Flex I/O connector board	37
Processor heat sink	38
System board	39
System board callouts	41
Wireless antennas and cables	42
Troubleshooting without diagnostics	44
Before you call for technical support	44
Helpful hints	45
Solving general problems	45
Cannot access the Computer Setup (F10) Utility when booting the computer	46
Computer appears locked up and will not turn off when the power button is pressed	46
Computer will not respond to keyboard or mouse	46
Computer date and time display is incorrect	46
There is no sound or sound volume is too low	46
Cannot remove computer cover or access panel	47
Poor performance	47
Computer turned off automatically and the power light blinks red four times and then white two times	48
System does not turn on and the lights on the front of the computer are not blinking	48
Solving power problems	49
Power supply shuts down intermittently	49
Computer turned off automatically, power light blinks red two times followed by a two-second pause, and the computer beeps two times (Beeps stop after fifth iteration but lights continue blinking)	49
Power light blinks red four times followed by a two-second pause and the computer beeps four times (Beeps stop after fifth iteration but lights continue blinking)	50
Solving hard drive problems	50
Hard drive error occurs	50
Disk drive transaction problem	50
Drive not found (identified)	51
Nonsystem disk/NTLDR missing message	51
Computer will not boot from hard drive	51
Computer seems to be locked up	52
Solving audio problems	52
Sound cuts in and out	52
Sound does not come out of the speaker or headphones	52
Computer appears to be locked up while recording audio	53
Line-in jack is not functioning properly	53
Solving printer problems	53
Printer will not print	53
Printer will not turn on	54
Printer prints garbled information	54
Printer will not print	54
Solving keyboard and mouse problems	54
Keyboard commands and typing are not recognized by the computer	54
Mouse does not respond to movement or is too slow	55
Solving hardware installation problems	55
A new device is not recognized as part of the system	55
Computer will not start	56
Power light blinks red three times and then white two times	56
Solving network problems	57
Network driver does not detect network controller	57
Network status link light never blinks	57
Diagnostics reports a failure	57
Diagnostics passes, but the computer does not communicate with the network	58
Network controller stopped working when an expansion board was added to the computer	58
Network controller stops working without apparent cause	58
Cannot connect to network server when attempting remote system installation	58
System setup utility reports unprogrammed EEPROM	59
Solving memory problems	59
System will not boot or does not function properly after installing additional memory modules	59
Out of memory error	59
Memory count during POST is wrong	59
Insufficient memory error during operation.	60
Power light blinks red five times followed by a two-second pause and the computer beeps five times (Beeps stop after fifth iteration but lights continue blinking)	60
Solving USB flash drive problems	60
USB flash drive is not seen as a drive letter in Windows	60
USB flash drive not found (identified)	60
System will not boot from USB flash drive	61
The computer boots to DOS after making a bootable flash drive	61
Solving internet access problems	61
Unable to connect to the internet	61
Cannot automatically launch internet programs	62
Solving software problems	62
Computer will not start up and the HP logo does not appear	62
“Illegal Operation has Occurred” error message is displayed	62
Computer Setup (F10) Utility	63
Using Computer Setup (F10) Utilities	63
Computer Setup Main	64
Computer Setup Security	67
Computer Setup Advanced	72
POST error messages	80
POST numeric codes and text messages	80
Interpreting POST diagnostic front panel lights and audible codes	86
Password security and resetting CMOS	88
Changing a setup or power-on password	88
Deleting a setup or power-on password	88
Backing up, restoring, and recovering	90
Backing up information and creating recovery media	90
Using the HP Cloud Recovery Download Tool to create recovery media (select products only)	90
Using Windows tools for backing up	90
Restoring and recovering your system	90
Creating a system restore	91
Restoring and recovery methods	91
Recovering using HP Recovery media	91
Changing the computer boot order	92
Using HP Sure Recover (select products only)	92
Using HP PC Hardware Diagnostics	93
Using HP PC Hardware Diagnostics Windows (select products only)	93
Using an HP PC Hardware Diagnostics Windows hardware failure ID code	93
Accessing HP PC Hardware Diagnostics Windows	93
Accessing HP PC Hardware Diagnostics Windows from HP Help and Support (select products only)	93
Accessing HP PC Hardware Diagnostics Windows from HP Support Assistant	94
Accessing HP PC Hardware Diagnostics Windows from the Start menu (select products only)	94
Downloading HP PC Hardware Diagnostics Windows	94
Downloading the latest HP PC Hardware Diagnostics Windows version from HP	94
Downloading the HP PC Hardware Diagnostics Windows from the Microsoft Store	94
Downloading HP Hardware Diagnostics Windows by product name or number (select products only)	95
Installing HP PC Hardware Diagnostics Windows	95
Using HP PC Hardware Diagnostics UEFI	95
Using an HP PC Hardware Diagnostics UEFI hardware failure ID code	95
Starting HP PC Hardware Diagnostics UEFI	96
Downloading HP PC Hardware Diagnostics UEFI to a USB flash drive	96
Downloading the latest HP PC Hardware Diagnostics UEFI version	96
Downloading HP PC Hardware Diagnostics UEFI by product name or number (select products only)	97
Using Remote HP PC Hardware Diagnostics UEFI settings (select products only)	97
Downloading Remote HP PC Hardware Diagnostics UEFI	97
Downloading the latest Remote HP PC Hardware Diagnostics UEFI version	97
Downloading Remote HP PC Hardware Diagnostics UEFI by product name or number	97
Customizing Remote HP PC Hardware Diagnostics UEFI settings	97
Statement of memory volatility	99
Current BIOS steps	99
Nonvolatile memory usage	101
Questions and answers	103
Using HP Sure Start (select products only)	105
Power cord set requirements	106
General requirements	106
Japanese power cord requirements	106
Country-specific requirements	106
Specifications	108

Match case Limit results 1 per page

Table 6-2

Computer Setup Security

(continued)

Option

Description

●

Network Controller Conﬁguration Restore: Select to restore the network controller parameters to the

factory state saved in the HP Sure Start Private nonvolatile (ﬂash) memory. This setting is available

only on computers with built-in NIC.

NOTE:

This process can take up to 30 seconds. You need to restore this only when the Network

Controller Conﬁguration mismatch warning is set.

●

Dynamic Runtime Scanning of Boot Block: Veriﬁes the integrity of the BIOS boot block region several

times each hour while the computer is running. Default is enabled.

●

Sure Start BIOS Settings Protection: When enabled, HP Sure Start locks all critical BIOS settings and

provides enhanced protection for these settings using nonvolatile (ﬂash) memory. Default is oﬀ.

NOTE:

An administrator password must be set to activate this setting.

●

Sure Start Secure Boot Keys Protection: Saves a backup copy of Secure Boot Keys so that they can be

recovered if someone attempts to alter them in an unauthorized manner.

●

Enhanced HP Firmware Runtime Intrusion Prevention and Detection: Enables monitoring of HP

system ﬁrmware executing out of main memory while the operating system is running. Any

anomalies detected in HP system ﬁrmware that is active while the operating system is running

will result in a Sure Start security event being generated.

●

Sure Start Security Event Policy. Controls HP Sure Start behavior upon identifying a critical security

event (any modiﬁcation to HP ﬁrmware) while the operating system is running.

–

Log Event Only: HP Sure Start will log all critical security events in the HP Sure Start audio log

within the HP Sure Start nonvolatile (ﬂash) memory.

–

Log Event and notify user: In addition to logging all critical security events, HP Sure Start will

notify the user within the operating system that a critical event has occurred.

–

Log Event and power oﬀ system: In addition to logging all critical security events, HP Sure Start

turns of the computer upon detecting a HP Sure Start Security Event. Because of the potential

for data loss, HP recommends this setting only in situations where security integrity of the

system is a higher priority than the risk of potential data loss.

●

Sure Start Security Event Boot Notiﬁcation: Lets you enable a warning message on the startup

screen if there is a Sure Start event (BIOS recovery, Memory intrusion, etc.)

Secure Boot Conﬁguration

Lets you be sure that an operating system is legitimate before booting to it, making Windows resistant to

malicious modiﬁcation from preboot to full operating system booting, preventing ﬁrmware attacks. UEFI

and Windows Secure Boot only allow code signed by preapproved digital certiﬁcates to run during the

ﬁrmware and OS boot process.

NOTE:

An administrator password must be set to activate this setting. Secure Boot must also be

enabled.

●

Secure Boot: Default is disabled.

●

Secure Boot Key Management: Lets you manage the custom key settings.

NOTE:

Access to these settings requires Sure Start Secure Boot Keys Protection to be disabled.

Import Custom Secure Boot Keys: Default is disabled.

Clear Secure Boot keys: Lets you delete any previously loaded custom boot keys. Clearing keys will

disable secure boot. Default is disabled.

Reset Secure Boot keys to factory defaults: Default is disabled.

Enable MS UEFI CA key: Disabling this setting alters the Secure Boot key list to further restrict the

allowed software components. Set this option to disable to support Device Guard. Default is enabled.

Chapter 6

Computer Setup (F10) Utility