HP Dc5800 Service Reference Guide: HP Compaq dc5800 Business PC - Page 33

HP ProtectTools Security Manager, HP Client Catalog for SMS - bios update windows

Page 33 highlights

Server (SMS). Using SSM, you can distribute customer-created or third-party updates that have been packaged in the SSM-format. SSM may be downloaded at no charge by visiting http://www.hp.com/go/ssm. NOTE: SSM does not currently support remote ROM flash on systems that have Windows Vista BitLocker enabled and are using TPM measurements to protect the BitLocker keys because flashing the BIOS would invalidate the trust signature that BitLocker created for the platform. Disable BitLocker via Group Policy in order to flash the system BIOS. You can enable BitLocker support without TPM measurements of BIOS to avoid invalidating the BitLocker keys. HP recommends you keep a secure backup of the BitLocker credentials in case of recovery emergencies. HP ProtectTools Security Manager HP ProtectTools Security Manager software provides security features that help protect against unauthorized access to the computer, networks, and critical data. Enhanced security functionality is provided by the following software modules: ● Credential Manager for HP ProtectTools ● Embedded Security for HP ProtectTools ● Java Card Security for HP ProtectTools ● BIOS Configuration for HP ProtectTools ● Drive Encryption for HP ProtectTools ● Device Access Manager for HP ProtectTools The software modules available for your computer may vary depending on your model. For example, Embedded Security for HP ProtectTools is available only for computers on which the Trusted Platform Module (TPM) embedded security chip is installed. HP ProtectTools software modules may be preinstalled, preloaded, or available for download from the HP Web site. For select HP Compaq Desktops, HP ProtectTools is available as an after market option. Visit http://www.hp.com for more information. NOTE: The instructions in this guide are written with the assumption that you have already installed the applicable HP ProtectTools software modules. HP Client Catalog for SMS Update management is an important function of maintaining any set of computers, from a single PC to an enterprise datacenter. The ability to identify which updates exist-and selectively deploy those updates in a timely and automated manner-can help maintain security and productivity for the managed organization. HP now offers a mechanism to streamline updates for HP systems within a Microsoft System Management Server management infrastructure. The HP Client Catalog for SMS contains software driver and patch information for desktop, mobile and workstation platforms. With SMS 2003 R2 and Inventory Tool for Custom Updates, organizations can integrate and deploy HP software updates quickly and easily, based on detailed platform characteristics that the HP Client Catalog for SMS provides to target appropriate client systems within the managed enterprise. For more information on HP Client Catalog for SMS, visit http://www/hp/com/go/easydeploy/. Software Updating and Management 25

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255

Server (SMS). Using SSM, you can distribute customer-created or third-party updates that have been
packaged in the SSM-format.
SSM may be downloaded at no charge by visiting
go/ssm
.
NOTE:
SSM does not currently support remote ROM flash on systems that have Windows Vista
BitLocker enabled and are using TPM measurements to protect the BitLocker keys because flashing
the BIOS would invalidate the trust signature that BitLocker created for the platform. Disable BitLocker
via Group Policy in order to flash the system BIOS.
You can enable BitLocker support without TPM measurements of BIOS to avoid invalidating the
BitLocker keys. HP recommends you keep a secure backup of the BitLocker credentials in case of
recovery emergencies.
HP ProtectTools Security Manager
HP ProtectTools Security Manager software provides security features that help protect against
unauthorized access to the computer, networks, and critical data. Enhanced security functionality is
provided by the following software modules:
Credential Manager for HP ProtectTools
Embedded Security for HP ProtectTools
Java Card Security for HP ProtectTools
BIOS Configuration for HP ProtectTools
Drive Encryption for HP ProtectTools
Device Access Manager for HP ProtectTools
The software modules available for your computer may vary depending on your model. For example,
Embedded Security for HP ProtectTools is available only for computers on which the Trusted Platform
Module (TPM) embedded security chip is installed.
HP ProtectTools software modules may be preinstalled, preloaded, or available for download from the
HP Web site. For select HP Compaq Desktops, HP ProtectTools is available as an after market option.
Visit
for more information.
NOTE:
The instructions in this guide are written with the assumption that you have already installed
the applicable HP ProtectTools software modules.
HP Client Catalog for SMS
Update management is an important function of maintaining any set of computers, from a single PC to
an enterprise datacenter. The ability to identify which updates exist—and selectively deploy those
updates in a timely and automated manner—can help maintain security and productivity for the managed
organization. HP now offers a mechanism to streamline updates for HP systems within a Microsoft
System Management Server management infrastructure. The HP Client Catalog for SMS contains
software driver and patch information for desktop, mobile and workstation platforms. With SMS 2003
R2 and Inventory Tool for Custom Updates, organizations can integrate and deploy HP software updates
quickly and easily, based on detailed platform characteristics that the HP Client Catalog for SMS
provides to target appropriate client systems within the managed enterprise.
For more information on HP Client Catalog for SMS, visit
http://www/
hp/com/go/easydeploy/
.
Software Updating and Management
25