Computer Setup-Security - HP Pro G2 SFF Manual

Table 6-1 Computer Setup–Main menu
Option
Computer Setup—Security
NOTE: Support for specific Computer Setup options may vary depending on the hardware configuration.
Table 6-2 Computer Setup–Security menu
Option
Administrator Password
Power-On Password
Stringent Password
Intel Software Guard
Extensions (SGX)
TPM Device
TPM State
Clear TPM
74 Chapter 6 Computer Setup (F10) Utility
Description
● System Log (select to see log
Build ID
●
● Feature Byte
Description
Lets you set and enable a BIOS administrator password, which controls access to the following features:
● Setup Menu (F10)
● UEFI HII Configuration
● Update system ROM
● WMI commands that change system settings
BIOS Configuration Utility (BCU)
●
● Additional power-on password
NOTE: If the password is set, it is required to change Computer Setup options, update the BIOS, and
make changes to certain plug and play settings under Windows.
The Power-On Password prevents unauthorized computer start (boot).
You must know the current password to be able to change it.
Enabling the stringent password disables the ability to reset the password by moving the jumper on the
system board.
IMPORTANT: If you enable the stringent security feature and you forget the setup password or the
power-on password, the computer is inaccessible and can no longer be used.
If you lose or forget the password, the system board must be replaced. This scenario is not covered under
warranty.
To prevent the computer from becoming permanently unusable, record your configured setup password
or power-on password in a safe place away from your computer. Without these passwords, the computer
cannot be unlocked.
SGX protects select code and data from disclosure or modification.
Set the Trusted Platform Module as available or hidden.
If TPM Device is set to 'hidden', the BIOS hides this setting.
If the TPM Device setting changes from 'hidden' to 'available', the BIOS makes this setting available
immediately, without a restart.
The TPM State setting can change only if you confirm the request using the Physical Presence check
prompted by the BIOS during the next startup.
If TPM Device is set to 'hidden', the BIOS hides this setting.