HP dx6128 Data Execution Prevention - White Paper, 2nd Edition - Page 17

Will an XD or NX processor work without Windows XP SP2?

Page 17 highlights

How or where does DEP fit in? DEP works with XD/NX to help prevent execution of malicious code. Will an XD or NX processor work without Windows XP SP2? At this time, XD/NX support requires the following operating systems: • Windows XP SP2 • Windows Server 2003 SP1 • SUSE Linux 9.2 • Red Hat Enterprise Linux 3 Update 3 What will these technologies do for me? XD and/or NX potentially reduces the number of viruses that exploit buffer overruns, providing greater overall system security. What will these technologies change in my systems? Existing user applications that perform dynamic code generation and do not mark the generated code with Execute permission will encounter problems. Therefore, HP's current deployment strategy is to ship with XD/NX disabled and DEP set for essential Windows programs and services only. Customers are strongly advised to test all end-user applications thoroughly before deploying. How will these technologies affect my image? XD/NX will stop any applications or drivers that attempt to execute out of data memory. You should test your images before deploying XD/NX. If a problem does occur with an application/ driver associated with a trusted software, you can exclude that software. Will the new processors, new or updated BIOS, and Windows XP SP2 require a new image qualification? Once an image is qualified on an XD/NX-enabled platform, that image will function properly for future updates with respect to XD/NX functionality. Is the BIOS supporting this functionality different from the BIOS HP ships today? Intel 915 and Transmeta systems ship with XD disabled by default in BIOS. Intel 945 and AMD systems ship with XD enabled by default in BIOS. Is HP making the BIOS current image friendly? Yes, you can enable/disable XD in F10 Setup on Intel-based systems. NX-based systems do not currently allow you to enable or disable XD in F10 Setup. Are XD and NX enabled or disabled by default? XD is disabled by default in Intel 915-based computers and enabled by default in Intel 945based computers. NX is currently processor-dependent. AMD-based systems are enabled by default. Transmetabased systems are disabled by default. 17

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21

17
How or where does DEP fit in?
DEP works with XD/NX to help prevent execution of malicious code.
Will an XD or NX processor work without Windows XP SP2?
At this time, XD/NX support requires the following operating systems:
Windows XP SP2
Windows Server 2003 SP1
SUSE Linux 9.2
Red Hat Enterprise Linux 3 Update 3
What will these technologies do for me?
XD and/or NX potentially reduces the number of viruses that exploit buffer overruns, providing
greater overall system security.
What will these technologies change in my systems?
Existing user applications that perform dynamic code generation and do not mark the generated
code with Execute permission will encounter problems. Therefore, HP’s current deployment
strategy is to ship with XD/NX disabled and DEP set for essential Windows programs and
services only. Customers are strongly advised to test all end-user applications thoroughly before
deploying.
How will these technologies affect my image?
XD/NX will stop any applications or drivers that attempt to execute out of data memory. You
should test your images before deploying XD/NX. If a problem does occur with an application/
driver associated with a trusted software, you can exclude that software.
Will the new processors, new or updated BIOS, and Windows XP SP2 require a new image
qualification?
Once an image is qualified on an XD/NX-enabled platform, that image will function properly for
future updates with respect to XD/NX functionality.
Is the BIOS supporting this functionality different from the BIOS HP ships today?
Intel 915 and Transmeta systems ship with XD disabled by default in BIOS. Intel 945 and AMD
systems ship with XD enabled by default in BIOS.
Is HP making the BIOS current image friendly?
Yes, you can enable/disable XD in F10 Setup on Intel-based systems.
NX-based systems do not currently allow you to enable or disable XD in F10 Setup.
Are XD and NX enabled or disabled by default?
XD is disabled by default in Intel 915-based computers and enabled by default in Intel 945-
based computers.
NX is currently processor-dependent. AMD-based systems are enabled by default. Transmeta-
based systems are disabled by default.