HP Z4 G4 Maintenance And Service Manual page 42

Table 5-3 Computer Setup—Advanced (for advanced users) (continued)
Option
Boot Options (continued)
Secure Boot
Configuration
System Options
34 Chapter 5 Computer Setup (F10) Utility
Heading
Default is enabled. Specify the order in which UEFI boot sources (such as a internal hard drive, USB
hard drive, USB optical drive, or internal optical drive) are checked for a bootable operating system
image.
UEFI boot sources always have precedence over legacy boot sources.
● Num lock on at boot
● Legacy Boot Order
Specify the order in which legacy boot sources (such as a network interface card, internal hard drive,
USB optical drive, or internal optical drive) are checked for a bootable operating system image.
Specify the order of attached hard drives. The first hard drive in the order will have priority in
the boot sequence and will be recognized as drive C (if any devices are attached).
NOTE: To drag a device to a preferred place, press Enter.
NOTE: MS-DOS drive lettering assignments may not apply after a non-MS-DOS operating system has
started.
Shortcut to Temporarily Override Boot Order
To boot one time from a device other than the default device specified in Boot Order, restart the computer
and press Esc (to access the Startup menu) and then
menu) when the monitor light illuminates. After POST is completed, a list of bootable devices is displayed.
Use the arrow keys to select the preferred bootable device and press Enter. The computer then boots
from the selected non-default device for this one time.
Configure Legacy Support and Secure Boot
Legacy Support – Lets you turn off all legacy support on the computer, including booting to DOS, running
legacy graphics cards, booting to legacy devices, and so on.
Secure Boot – Lets you make sure an operating system is legitimate before booting to it, making your
operating system resistant to malicious modification from preboot to full operating system booting,
preventing firmware attacks. UEFI and Windows Secure Boot only allow code signed by pre-approved
digital certificates to run during the firmware and operating system boot process. Default is 'Legacy
Support Disable and Secure Boot Disable' for non-Windows configurations. Default is 'Legacy Support
Disable and Secure Boot Enable' for Windows 10 and later configurations.
Secure Boot Key Management
Lets you manage the custom key settings.
Clear Secure Boot Keys
Lets you delete any previously loaded custom boot keys. Clearing keys will disable secure boot. Default is
disabled.
Reset Secure Boot keys to factory defaults
Default is disabled.
Enable MS UEFI CA key
Disabling this setting alters the Secure Boot key list to further restrict the allowed software
components. Set this option to 'disable' to support Device Guard.
SATA Controller (enable/disable)
Configure Storage Controller for RAID (enable/disable)
Lets you enable onboard RAID. If the boot drive is an SED hard drive or solid-state drive, the default is
AHCI. Otherwise, the default is enabled.
POST Prompt for RAID Configuration
When disabled, the prompt for 'RAID option ROM' in legacy mode is suppressed.
F9 (Boot Menu), or only F9 (skipping the Startup