HP Z4 Maintenance and Service Guide - Page 104

Clearing storage drives (hard drive, solid-state drive, NVMe, and other), Clear Secure Boot Keys

Get HP Z4 PDF manuals and user guides View all HP Z4 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 104 highlights

3. Enter the BIOS (F10) setup menu. Select the Security tab, and select Restore Security Settings to Factory Defaults. The system will automatically reboot. Upon reboot, you may be asked to press F1 to proceed with clearing the TPM. The following data will be cleared after this step is complete: ● BIOS administrator password ● POST power-on password ● TPM memory ● Virtualization and TXT settings ● SureStart settings 4. Enter the BIOS (F10) setup menu. Select the Advanced tab, and navigate to Secure Boot Configuration. Check the Reset Secure Boot keys to factory defaults box. Save and exit. Upon restart, navigate back to Secure Boot Configuration from the Advanced tab. Now check the Clear Secure Boot Keys box, save, and restart. The system secure boot keys are now cleared. 5. If DriveLock has been enabled on any storage drives, select the Security tab in the F10 BIOS menu. Select Hard Drive Utilities, and navigate to the DriveLock/Automatic DriveLock menu. Choose each drive that is locked and select Disable DriveLock. 6. Remove AC power and the 3V system battery for at least 1 hour. After this, the following memories will be cleared: ● System RAM memory from the installed DIMMs ● Battery-backed SIO RAM ● RTC battery backed-up CMOS configuration memory CMOS 7. Remove and retain the storage drives or clear the contents of the drives. Clearing storage drives (hard drive, solid-state drive, NVMe, and other) Clear the hard drive contents by using the Secure Erase BIOS feature or a third-party application that, ideally, is U.S. Department of Defense (DOD) 5220.22-M approved. To run Secure Erase, enter the F10 Bios Setup menu by powering on the system and pressing F10 as soon as the HP logo appears. 1. Select the Security menu and scroll down to the Hard Drive Utilities menu. 2. Select Secure Erase. 3. Select the desired drive. 4. Select Continue. The estimated time to complete Secure Erase will be displayed along with a final warning not to remove power. 5. Select Continue. The elapsed time will be displayed until "Secure Erase Complete." is displayed. 6. Press Esc twice to return to the drive selection menu. Go to step 3 to Secure Erase additional drives or exit BIOS Setup if done. NOTE: The Secure Erase process will take a long time. The amount of time varies based on the hard drive capacity and write speed. 96 Appendix B Statement of memory volatility

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
3.
Enter the BIOS (F10) setup menu. Select the
Security
tab, and select
Restore Security Settings to
Factory Defaults
. The system will automatically reboot. Upon reboot, you may be asked to press
F1
to
proceed with clearing the TPM. The following data will be cleared after this step is complete:
●
BIOS administrator password
●
POST power-on password
●
TPM memory
●
Virtualization and TXT settings
●
SureStart settings
4.
Enter the BIOS (F10) setup menu. Select the
Advanced
tab, and navigate to
Secure Boot
Configuration
.
Check the
Reset Secure Boot keys to factory defaults
box. Save and exit. Upon restart, navigate back
to
Secure Boot
Configuration
from the
Advanced
tab. Now check the
Clear Secure Boot Keys
box, save,
and restart. The system secure boot keys are now cleared.
5.
If DriveLock has been enabled on any storage drives, select the
Security
tab in the F10 BIOS menu.
Select
Hard Drive Utilities
, and navigate to the
DriveLock/Automatic DriveLock
menu. Choose each
drive that is locked and select
Disable DriveLock
.
6.
Remove AC power and the 3V system battery for at least 1 hour. After this, the following memories will
be cleared:
●
System RAM memory from the installed DIMMs
●
Battery-backed SIO RAM
●
RTC battery backed-up CMOS
configuration
memory CMOS
7.
Remove and retain the storage drives or clear the contents of the drives.
Clearing storage drives (hard drive, solid-state drive, NVMe,
and other)
Clear the hard drive contents by using the Secure Erase BIOS feature or a third-party application that, ideally,
is U.S. Department of Defense (DOD) 5220.22-M approved.
To run Secure Erase, enter the F10 Bios Setup menu by powering on the system and pressing
F10
as soon as
the HP logo appears.
1.
Select the
Security
menu and scroll down to the
Hard Drive Utilities
menu.
2.
Select
Secure Erase
.
3.
Select the desired drive.
4.
Select
Continue
. The estimated time to complete Secure Erase will be displayed along with a
final
warning not to remove power.
5.
Select
Continue
. The elapsed time will be displayed until “Secure Erase Complete.” is displayed.
6.
Press
Esc
twice to return to the drive selection menu. Go to step 3 to Secure Erase additional drives or
exit BIOS Setup if done.
NOTE:
The Secure Erase process will take a long time. The amount of time varies based on the hard drive
capacity and write speed.
96
Appendix B
Statement of memory volatility