HP 260 G2 Maintenance And Service Manual page 52

Table 5-3 Computer Setup—Security (continued)
Option
System Security (these
options are hardware
dependent)
Trusted Computing
Secure Boot
Configuration
44 Chapter 5 Computer Setup (F10) Utility
Description
● SKU Number
Family Name
●
● Asset tag (18-byte identifier), a property identification number assigned by the company to the
computer.
● Ownership tag (80-byte identifier) displayed during POST.
● Feature Byte
● Build ID
● Keyboard locale setting for System ID entry.
NOTE: Available options are displayed depending on system configuration.
Data Execution Prevention (enable/disable) - Helps prevent operating system security breaches. Default is
enabled.
Virtualization Technology (enable/disable) - Controls the virtualization features of the processor.
Changing this setting requires turning the computer off and then back on. Default is disabled.
Security Device Support. Default is enable.
TPM State. Lets you enable the Trusted Platform Module (TPM). Default is disabled.
The information shown on the bottom half of the Trusted Computing dialog box provides current status
information.
● Legacy Support—Enable/Disable. Allows you to turn off all legacy support on the computer,
including booting to DOS, running legacy graphics cards, booting to legacy devices, and so on. If set
to disable, legacy boot options in Storage > Boot Order are not displayed. Default is enabled.
Secure Boot—Enable/Disable. Allows you to make sure an operating system is legitimate before
●
booting to it, making Windows resistant to malicious modification from preboot to full OS booting,
preventing firmware attacks. UEFI and Windows Secure Boot only allow code signed by pre-
approved digital certificates to run during the firmware and OS boot process. Default is disabled,
except for Windows systems which have this setting enabled. Secure Boot enabled also sets Legacy
Support to disabled.
● Key Management—This option lets you manage the custom key settings.
Clear Secure Boot Keys—Don't Clear/Clear. Allows you to delete any previously loaded custom
—
boot keys. Default is Don't Clear.
Key Ownership—HP Keys/Custom Keys. Selecting Custom Mode allows you to modify the
—
contents of the secure boot signature databases and the platform key (PK) that verifies kernels
during system start up, allowing you to use alternative operating systems. Selecting HP Keys
causes the computer boot using the preloaded HP-specific boot keys. Default is HP Keys.
● Fast Boot—Enable/Disable. Fast boot disables the ability to interrupt boot, such as pressing f keys
to access items before the operating system loads. Default is disabled.
NOTE: If Windows detects a serious error, it will interrupt the boot process automatically and
display advanced boot options.
From Windows, you can press
device or troubleshoot your computer.
Shift and select Restart to access the screen that lets you boot to a