HP Pro Mini 260 G9 Desktop PC Maintenance and Service Guide - Page 70

Ready BIOS for Device Guard Use: Requires BIOS Administrator password to be configured and Secure

Page 70 highlights

Table 6-2 Computer Setup Security (continued) Option Description ● Ready BIOS for Device Guard Use: Requires BIOS Administrator password to be configured and Secure Boot to be enabled. Secure Platform Management (SPM) ● SPM Current State: Displays the current state. Also lets you change the state. ● Unprovision SPM: Deprovisions SPM, which causes HP Sure Run to revert to the inactive state and return HP Sure Recover to default settings. ● HP Sure Run Current State: Displays the current state. Also lets you change the state. Deactivate HP Sure Run: Deactivates HP Sure Run without deprovisioning SPM. ● Smart Health Enable ● EBAM Current State: Displays the current state. Also lets you change the state. Disable EBAM: Disables Enhanced BIOS Authentication Mode (EBAM). ● Deactivate HP Sure Run: Requires BIOS Administrator password to be configured. ● Local Access Key: Indicates is the key is present. Also lets you clear the keys and reboot. Clear EBAM Local Access Key(s) and Reboot. Deletes all currently established local access keys created for Enhanced BIOS Authentication Mode (EBAM). Physical Presence Interface: When set to enabled, the user is notified at system power up when changes are made to system security policy. The user must manually agree to those changes before the change is confirmed. Default is enabled. Smart Cover: The Smart Cover Lock is a software-controllable solenoid lock that restricts unauthorized access to the system's internal components. (select products only) ● Cover Lock: Default is unlock. ● Cover Removal Sensor: Lets you disable the cover sensor or configure what action is taken if the computer cover is removed. Default is disabled. NOTE: Notify user alerts the user with a POST error on the first boot after the sensor detects removal of the cover. If the password is set, Administrator Password requires that the password be entered to boot the computer if the sensor detects that the cover has been removed. Trusted Execution Technology (TXT) Enables Trusted Execution Technology on select Intel-based systems. Default is disabled. NOTE: Enabling this feature disables OS management of TPM (Embedded Security Device), prevents a reset of the TPM, and constrains the configuration of VTx, VTd, and TPM. Intel Software Guard Extensions (SGX) Intel SGX is a set of processor code instructions from that allows user-level code to allocate private regions of memory, that unlike normal process memory is also protected from processes running at higher privilege levels. ● Software control ● Disable ● Enable Full encryption of main memory (DRAM) (select products only) When selected, the computer stores all data to DRAM in an encrypted format. Computer Setup Security 63

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110

Table 6-2
Computer Setup Security
(continued)
Option
Description
Ready BIOS for Device Guard Use: Requires BIOS Administrator password to be configured and Secure
Boot to be enabled.
Secure Platform Management (SPM)
SPM Current State: Displays the current state. Also lets you change the state.
Unprovision SPM: Deprovisions SPM, which causes HP Sure Run to revert to the inactive state and
return HP Sure Recover to default settings.
HP Sure Run Current State: Displays the current state. Also lets you change the state.
Deactivate HP Sure Run: Deactivates HP Sure Run without deprovisioning SPM.
Smart Health Enable
EBAM Current State: Displays the current state. Also lets you change the state.
Disable EBAM: Disables Enhanced BIOS Authentication Mode (EBAM).
Deactivate HP Sure Run: Requires BIOS Administrator password to be configured.
Local Access Key: Indicates is the key is present. Also lets you clear the keys and reboot.
Clear EBAM Local Access Key(s) and Reboot. Deletes all currently established local access keys
created for Enhanced BIOS Authentication Mode (EBAM).
Physical Presence Interface
: When set to enabled, the user is notified at system power up when changes
are made to system security policy. The user must manually agree to those changes before the change is
confirmed. Default is enabled.
Smart Cover
: The Smart Cover Lock is a software-controllable solenoid lock that restricts unauthorized
access to the system’s internal components. (select products only)
Cover Lock: Default is unlock.
Cover Removal Sensor: Lets you disable the cover sensor or configure what action is taken if the
computer cover is removed. Default is disabled.
NOTE:
Notify user
alerts the user with a POST error on the first boot after the sensor detects
removal of the cover. If the password is set,
Administrator Password
requires that the password be
entered to boot the computer if the sensor detects that the cover has been removed.
Trusted Execution Technology (TXT)
Enables Trusted Execution Technology on select Intel-based systems. Default is disabled.
NOTE:
Enabling this feature disables OS management of TPM (Embedded Security Device), prevents a
reset of the TPM, and constrains the configuration of VTx, VTd, and TPM.
Intel Software Guard Extensions (SGX)
Intel SGX is a set of processor code instructions from that allows user-level code to allocate private
regions of memory, that unlike normal process memory is also protected from processes running at
higher privilege levels.
Software control
Disable
Enable
Full encryption of main memory (DRAM)
(select products only)
When selected, the computer stores all data to DRAM in an encrypted format.
Computer Setup Security
63