HP Z Series Maintenance And Service Manual page 70

Table 6-2 Computer Setup Security (continued)
Option
Security Configuration
62 Chapter 6 Computer Setup (F10) Utility
Description
TPM Embedded Security
● TPM Specification Version
Displays the current TPM version.
● TPM Device
Lets you set the Trusted Platform Module as available or hidden. Default is available.
● TPM State
Select to enable the TPM. Default is disabled.
● Clear TPM
Select to reset the TPM to an unowned state. After the TPM is cleared, it is also turned off. To
temporarily suspend TPM operations, turn the TPM off instead of clearing it. Default is no.
IMPORTANT: Clearing the TPM resets it to factory defaults and turns it off. You will lose all
created keys and data protected by those keys.
● TPM Activation Policy
○ F1 to boot
○ Allow user to reject (default)
○ No prompts
BIOS SureStart
● Verify Boot Block on every boot: Select to enable HP SureStart. Default is disabled.
● Network Controller Configuration Restore: Select to restore the network controller parameters
to the factory state saved in the HP Sure Start Private nonvolatile (flash) memory. This setting is
available only on computers with built-in NIC.
NOTE: This process can take up to 30 seconds. You need to restore this only when the
Network Controller Configuration mismatch warning is set.
● Dynamic Runtime Scanning of Boot Block: Verifies the integrity of the BIOS boot block region
several times each hour while the computer is running. Default is enabled.
● Sure Start BIOS Settings Protection: When enabled, HP Sure Start locks all critical BIOS
settings and provides enhanced protection for these settings using nonvolatile (flash) memory.
Default is off.
NOTE: An administrator password must be set to activate this setting.
● Sure Start Secure Boot Keys Protection: Saves a backup copy of Secure Boot Keys so that they
can be recovered if someone attempts to alter them in an unauthorized manner.
● Enhanced HP Firmware Runtime Intrusion Prevention and Detection: Enables monitoring of HP
system firmware executing out of main memory while the operating system is running. Any
anomalies detected in HP system firmware that is active while the operating system is running
will result in a Sure Start security event being generated.