HP ProDesk 600 G1 EliteDesk 800 G1 Desktop Mini ProDesk 600 G1 Desktop Mini Ma - Page 79

System Security

Get HP ProDesk 600 G1 PDF manuals and user guides View all HP ProDesk 600 G1 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 79 highlights

System Security (these options are hardware dependent) Data Execution Prevention (enable/disable) - Helps prevent operating system security breaches. Default is enabled. Virtualization Technology (VTx) (enable/disable) - Controls the virtualization features of the processor. Changing this setting requires turning the computer off and then back on. Default is disabled. Embedded Security Device (enable/disable) - This option becomes available if Embedded Device is set to Available. Embedded Security Device turns the Trusted Platform Mechanism (TPM) on and off. ● Reset to Factory Settings (reset/do not reset) - Enabling this option will clear any saved data in the TPM and set the TPM back to factory default settings. Resetting to factory defaults will erase all security keys and leave the device in a disabled state. Changing this setting requires that you restart the computer. Default is Do not reset. CAUTION: The embedded security device is a critical component of many security schemes. Erasing the security keys will prevent access to data protected by the Embedded Security Device. Choosing Reset to Factory Settings may result in significant data loss. ● Measure boot variables/devices to PCR1 (enable/disable) - Enabling this option will allow the operating system to log boot variables/devices to PCR1 instead of PCR5. Typically, the computer measures the boot path and saves collected metrics to PCR5 (a register in the Embedded Security Device). Bitlocker tracks changes to any of these metrics, and forces the user to re-authenticate if it detects any changes. Enabling this feature lets you set Bitlocker to ignore detected changes to boot path metrics, thereby avoiding re-authentication issues associated with USB keys inserted in a port. Default is enabled. To enable the Embedded Security Device and to access any security features associated with the device, you must enter a setup password. Setting a device to 'Available' enables the operating system to access the device. 'Hidden' makes the device unavailable, meaning it is disabled by the BIOS and cannot be enabled by the operating system. OS management of Embedded Security Device - Enables or disables the ability of the operating system to control the TPM device, including turning it on and off, initializing it, and resetting it. ● Reset of Embedded Security Device through OS¯ (enable/disable) - This option allows the user to limit the operating system ability to request a Reset to Factory Settings of the Embedded Security Device. Default is disabled. ● No PPI provisioning (enable/disable) - This option lets to set Windows 8 to bypass the PPI (Physical Presence Interface) requirement and directly enable and take ownership of the TPM on first boot. End-user cannot change this setting after TPM is owned/initialized, unless the TPM is reset. Default is disabled for non-Windows 8 systems, and enabled for Windows 8. ● Allow PPI policy to be changed by OS (enable/disable) - Enabling this option allows the operating system to execute TPM operations without Physical Presence Interface. Default is disabled. Computer Setup (F10) Utilities 71

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
System Security
(these options are
hardware dependent)
Data Execution Prevention (enable/disable) - Helps prevent operating system security breaches.
Default is enabled.
Virtualization Technology (VTx) (enable/disable) - Controls the virtualization features of the
processor. Changing this setting requires turning the computer off and then back on. Default is
disabled.
Embedded Security Device (enable/disable) - This option becomes available if Embedded Device is
set to Available. Embedded Security Device turns the Trusted Platform Mechanism (TPM) on and off.
●
Reset to Factory Settings (reset/do not reset) - Enabling this option will clear any saved data in
the TPM and set the TPM back to factory default settings.
Resetting to factory defaults will erase all security keys and leave the device in a disabled
state. Changing this setting requires that you restart the computer. Default is Do not reset.
CAUTION: The embedded security device is a critical component of many security schemes.
Erasing the security keys will prevent access to data protected by the Embedded Security
Device. Choosing Reset to Factory Settings may result in significant data loss.
●
Measure boot variables/devices to PCR1 (enable/disable) - Enabling this option will allow the
operating system to log boot variables/devices to PCR1 instead of PCR5.
Typically, the computer measures the boot path and saves collected metrics to PCR5 (a register
in the Embedded Security Device). Bitlocker tracks changes to any of these metrics, and forces
the user to re-authenticate if it detects any changes. Enabling this feature lets you set Bitlocker
to ignore detected changes to boot path metrics, thereby avoiding re-authentication issues
associated with USB keys inserted in a port. Default is enabled.
To enable the Embedded Security Device and to access any security features associated with the
device, you must enter a setup password. Setting a device to ‘Available’ enables the operating
system to access the device. ‘Hidden’ makes the device unavailable, meaning it is disabled by the
BIOS and cannot be enabled by the operating system.
OS management of Embedded Security Device - Enables or disables the ability of the operating
system to control the TPM device, including turning it on and off, initializing it, and resetting it.
●
Reset of Embedded Security Device through OS¯ (enable/disable) - This option allows the user
to limit the operating system ability to request a Reset to Factory Settings of the Embedded
Security Device. Default is disabled.
●
No PPI provisioning (enable/disable) - This option lets to set Windows 8 to bypass the PPI
(Physical Presence Interface) requirement and directly enable and take ownership of the TPM
on first boot. End-user cannot change this setting after TPM is owned/initialized, unless the
TPM is reset. Default is disabled for non-Windows 8 systems, and enabled for Windows 8.
●
Allow PPI policy to be changed by OS (enable/disable) - Enabling this option allows the
operating system to execute TPM operations without Physical Presence Interface. Default is
disabled.
Computer Setup (F10) Utilities
71