HP ProOne 600 G4 Maintenance & Service Manual page 84

Table 6-2 Computer Setup—Security (continued)
Option
Change POST Power-On
Password (This selection
is active only if a BIOS
administrator password is
set.)
Password Policies
Security Configuration
76 Chapter 6 Computer Setup (F10) Utility
Description
Lets you change the POST power-on password.
You must know the current password to be able to change it.
Let you set the guidelines for a valid password. Options include:
Password minimum length
●
● Requires at least one symbol
Requires at least one number
●
● Requires at least one upper case character
Requires at least one lower case character
●
● Allow spaces
Clear Password Jumper
Select 'Honor' to allow or 'Ignore' to not allow the absence of the password jumper to clear the passwords
at boot up. Default is 'Honor'.
TPM Embedded Security
TPM Specification Version
●
Displays the current TPM version.
● TPM Device
Lets you set the Trusted Platform Module as available or hidden.
TPM State
●
Select to enable the TPM.
ClearTPM
●
Select to reset the TPM to an unowned state. After the TPM is cleared, it is also turned off. To
temporarily suspend TPM operations, turn the TPM off instead of clearing it.
CAUTION: Clearing the TPM resets it to factory defaults and turns it off. You will lose all created
keys and data protected by those keys.
TPM Activation Policy
●
○ F1 to boot
Allow user to reject
○
○ No prompts
BIOS SureStart
Verify Boot Block on every boot – Select to enable HP SureStart.
●
● BIOS Data Recovery Policy – Select 'Automatic' or 'Manual' to determine data recovery process.
Manual recovery is intended only for situations where forensic analysis is desired before HP
SureStart recovery. When this policy is set to manual, HP SureStart will not correct any issues that
are found until the manual recovery key sequence is input by the local user. This can result in a
computer that is unable to boot until the manual recovery key sequence is input.
Dynamic Runtime Scanning of Boot Block. Verifies the integrity of the BIOS boot block region several
●
times each hour while the system is running. Default is enabled.