HP EliteDesk 800 G8 Maintenance and Service Guide - Page 84
Computer Setup Security continued, Table 6-2
View all HP EliteDesk 800 G8 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 84 highlights
Table 6-2 Computer Setup Security (continued) Option Description - Boot menu in POST - System Recovery - Network boot - BIOS update ● Allow the use of administrator credentials to modify the power-on password. Security Configuration TPM Embedded Security ● TPM Specification Version Displays the current TPM version. ● TPM Device Lets you set the Trusted Platform Module as available or hidden. Default is available. ● TPM State Select to enable the TPM. Default is disabled. ● Clear TPM Select to reset the TPM to an unowned state. After the TPM is cleared, it is also turned off. To temporarily suspend TPM operations, turn the TPM off instead of clearing it. Default is no. IMPORTANT: Clearing the TPM resets it to factory defaults and turns it off. You will lose all created keys and data protected by those keys. ● TPM Activation Policy ○ F1 to boot ○ Allow user to reject (default) ○ No prompts BIOS SureStart ● Verify Boot Block on every boot: Select to enable HP SureStart. Default is disabled. ● BIOS Data Recovery Policy: Select Automatic or Manual to determine data recovery process. Manual recovery is intended only for situations when you want forensic analysis before HP SureStart recovery. When this policy is set to manual, HP SureStart will not correct any issues that are found until the local user enters the manual recovery key sequence. This can result in a computer that cannot boot until the manual recovery key sequence is entered. ● Network Controller Configuration Restore: Select to restore the network controller parameters to the factory state saved in the HP Sure Start Private nonvolatile (flash) memory. This setting is available only on computers with built-in NIC. NOTE: This process can take up to 30 seconds. You need to restore this only when the Network Controller Configuration mismatch warning is set. ● Dynamic Runtime Scanning of Boot Block: Verifies the integrity of the BIOS boot block region several times each hour while the computer is running. Default is enabled. ● Sure Start BIOS Settings Protection: When enabled, HP Sure Start locks all critical BIOS settings and provides enhanced protection for these settings using nonvolatile (flash) memory. Default is off. NOTE: An administrator password must be set to activate this setting. ● Sure Start Secure Boot Keys Protection: Saves a backup copy of Secure Boot Keys so that they can be recovered if someone attempts to alter them in an unauthorized manner. 76 Chapter 6 Computer Setup (F10) Utility