Table 8-2
Computer Setup—Security (continued)
Option
Description
●
Requires at least one number
●
Requires at least one upper case character
●
Requires at least one lower case character
●
Allow spaces
Clear Password Jumper
Select ‘Honor’ to engage or ‘Ignore’ to disengage the password jumper. Default is ‘Honor’.
TPM Embedded Security
Displays the TPM specification version.
Lets you configure the following TPM settings:
TPM Device
Lets you set the Trusted Platform Module as available or hidden.
TPM State
Select to enable the TPM.
Clear TPM
Select to reset the TPM to an unowned state. After the TPM is cleared, it is also turned off. To temporarily
suspend TPM operations, turn the TPM off instead of clearing it.
CAUTION:
Clearing the TPM resets it to factory defaults and turns it off. You will lose all created keys and
data protected by those keys.
BIOS SureStart
HP Sure Start verifies the integrity of HP BIOS code and critical, non-executable platform data residing in
the main flash and provides self-healing mechanisms to restore any code or critical platform data that
has been lost or is corrupted within the flash.
Verify Boot Block on every boot
Disabled (Default): When set to the default, HP Sure Start will verify the integrity of the BIOS in System
Flash each time the system is in a Sleep, Hibernate, or Off state such that assurance is provided that it has
not been tampered with before the host CPU executes that code as part of the process of resuming from
the low power state.
Enabled: When this box is checked, the HP Sure Start will continue to verify the integrity of the BIOS in
System Flash each time the system is in a Sleep, Hibernate, or Off state. Additionally, the HP Sure Start
will verify the integrity of the BIOS in System Flash on each Warm Boot (Windows Restart).
BIOS Data Recovery Policy
Automatic (Default): Any problems that are found by HP Sure Start will be automatically repaired not
requiring any special actions by the local user.
Manual (For Advanced Users only): Any problems found by HP Sure Start will not be repaired automatically
and will require a special key sequence input by the local user to proceed with the repair. This mode is only
intended for scenarios where the machine owner would prefer to perform forensics on the system flash
contents before it is repaired and is not recommended for the typical user. In the case of HP Sure Start
finding an issue with the initial BIOS code, the system will refuse to boot and flash a special LED sequence
until the special key sequence is pressed on the internal keyboard.
Network Controller Configuration Restore – This manual control will restore the network parameters
(used by the Intel integrated network controller) stored in System Flash to their factory defaults.
Dynamic Runtime Scanning of Boot Block
Select to enable.
Intel Software Guard
Extensions (SGX)
Let you enable or disable software guard extensions.
82
Chapter 8 Computer Setup (F10) Utility
Содержание Engage One Retail System 143
Страница 4: ...iv Safety warning notice ...
