HP EliteOne 1000 G1 Maintenance & Service Manual page 62

Table 5-3 Computer Setup—Advanced (for advanced users) (continued)
Option
Secure Boot
Configuration
System Options
54 Chapter 5 Computer Setup (F10) Utility
Heading
Configure Legacy Support and Secure Boot
Lets you turn off all legacy support on the computer, including booting to DOS, running legacy graphics
cards, booting to legacy devices, and so on.
Lets you make sure an operating system is legitimate before booting to it, making Windows resistant to
malicious modification from preboot to full operating system booting, preventing firmware attacks. UEFI
and Windows Secure Boot only allow code signed by pre-approved digital certificates to run during the
firmware and OS boot process.
● Legacy Support Enable and Secure Boot Disable
● Legacy Support Disable and Secure Boot Enable
● Legacy Support Disable and Secure Boot Disable
Default is 'Legacy Support Disable and Secure Boot Disable'.
Secure Boot Key Management
Lets you manage the custom key settings.
Import Custom Secure Boot keys
Default is disabled.
Clear Secure Boot Keys
Lets you delete any previously loaded custom boot keys. Clearing keys will disable secure boot. Default is
disabled.
Reset Secure Boot keys to factory defaults
Default is disabled.
Enable MS UEFI CA key
Disabling this setting alters the Secure Boot key list to further restrict the allowed software
components. Set this option to 'disable' to support Device Guard.
Ready BIOS for Device Guard Use
Requires BIOS Administrator password to be configured and Secure Boot to be enabled.
Configure storage controller for Intel Optane
Enables the Intel Optane memory module.
Hyperthreading
Lets you control processor capability. Default is enabled.
Multi-processor
Use this option to disable multi-processor support under the operating system. Default is enabled.
Virtualization Technology (VTx) (Intel only)
Controls the virtualization features of the processor. Changing this setting requires turning the computer
off and then back on. Default is disabled.
Virtualization Technology for Directed I/O (VTd) (Intel only)
Controls virtualization DMA remapping features of the chipset. Changing this setting requires turning the
computer off and then back on. Default is disabled.
M.2 SSD
Lets you disable the M.2 solid-state drive slot. Default is enabled.