HP EliteDesk 705 G5 Maintenance And Service Manual page 73

Table 5-2 Computer Setup—Security (continued)
Option Description
●
BIOS Sure Start
●
●
●
●
●
HP Secure Platform Management (SPM)
●
●
●
●
Physical Presence Interface. Notifies the user upon system power up when changes are made to system
security policy. The user must agree to the changes to confirm them. Default is enabled.
Smart Cover (Disable/Notify User)
Lets you set an alert is the computer cover is removed.
Utilities Hard Drive Utilities
●
IMPORTANT: Clearing the TPM resets it to factory defaults and turns it off. You will lose all created
keys and data protected by those keys.
TPM Activation Policy
Select policy as F1 to boot, allow user to reject, or no prompts.
Verify Boot Block on every boot. Default is disabled.
BIOS Data Recovery Policy. Default is Automatic.
IMPORTANT: Only select Manual in situations in which forensic analysis is to be performed before
HP Sure Start Recovery. When this policy is set to manual, HP Sure Start will not correct any issues
that are found until the manual recovery key sequence is entered by the local user. This can result in
a system that is unable to boot after inputting the manual recovery key sequence.
Sure Start BIOS Settings Protection. This setting requires setting the BIOS Administrator password.
Default is disabled.
Sure Start Secure Boot Keys Protection. Default is enabled.
Sure Start Security Event Boot Notification. Default is Require Acknowledgment.
HP Sure Run Current State (Inactive/Active)
Deactivate HP Sure Run
SPM Current State (Not provisoned/Provisioned)
Unprovision SPM
Save/Restore MBR of System Hard Drive
NOTE: Windows 10 systems are generally not formatted to include an MBR. Instead they use GUID
Partition Table (GPT) format, which better supports large hard drives.
Enabling this feature will save the Master Boot Record (MBR) of the system hard drive. If the MBR
gets changed, the user will be prompted to restore the MBR. Default is disabled.
The MBR contains information needed to successfully boot from a disk and to access the data stored
on the disk. Master Boot Record Security may prevent unintentional or malicious changes to the
MBR, such as those caused by some viruses or by the incorrect use of certain disk utilities. It also
allows you to recover the "last known good" MBR, should changes to the MBR be detected when the
system is restarted.
NOTE: Most operating systems control access to the MBR of the current bootable disk; the BIOS
cannot prevent changes that may occur while the operating system is running.
Restores the backup Master Boot Record to the current bootable disk. Default is disabled.
Only appears if all of the following conditions are true:
MBR security is enabled
–
A backup copy of the MBR has been previously saved
–
– The current bootable disk is the same disk from which the backup copy was saved
Computer Setup (F10) Utilities 65