HP 800 G1 manual Embedded Security, Utilities

,

		EMBEDDED SECURITY
Feature		Function	Default setting,	Reboot
			if applicable	required
BIOS Integrity Checking (Note: HP Sure Start is only supported on 2013 EliteBook and ZBook notebooks)				N/A
	Verify Boot Block on every boot	Verify the integrity of the system’s boot block on boot.	Disabled	Yes
	BIOS Data Recovery Policy	Recover System Data (For manual recovery during boot up press (Up	Automatic	Yes
		Arrow + Down Arrow + ESC) to restore System Data

Restore Network Configuration to factory defaults

TPM Embedded Security

TPM Device

Embedded Security Device State

Restore the network address and other network parameters to factory		Yes
default
Manages TPM Module settings		N/A
Exposes the integrated TPM module	Available	Yes
Enables the integrated TPM module	Disabled	Yes

TPM Reset to Factory Default

OS Management of TPM

Reset of TPM from OS System Management Command

Sets TPM Embedded Security settings to factory default	No	Yes
Allows operating system to manage TPM module	Enabled	Yes
Allows reset of TPM module from within the operating system	Disabled	Yes
Allows authorized personnel to reset security settings in case of a	Enabled	Yes
service event NOTE: In the event BIOS password is lost and this option
is disabled authorized personnel will not be able to remove lost
password.

		UTILITIES
Anti-Theft Tools				N/A
	Intel Anti-Theft	Server-based security		N/A
	– Active	Activates this option	Enabled	Yes
	– Suspend	Allows the feature to be disabled temporarily	Disabled	Yes
	Absolute Software Computrace			N/A

– Current State

Hard Drive Tools

Save/restore Master Boot Record (MBR) of the system hard drive

Read-only setting that reports the current status	Inactive	N/A
[Inactive/Active/Permanent Disabled]
		N/A
Saves a baseline MBR that can be restored if a change is detected	Disabled	Yes
NOTE: Not applicable for UEFI boot modes

DriveLock

Automatic DriveLock

Disk Sanitizer

Secure Erase

System IDs

Asset Tracking Number

Ownership Tag

Ownership Tag 2

Allows configuration of DriveLock Master and User passwords	Disabled	N/A
Requires the BIOS to authenticate the user before the drive is unlocked.	Disabled	N/A
The user can be a BIOS user (managed by F10 Setup) or a ProtectTools
user (managed by the OS).
Following authentication, the BIOS automatically supplies the
DriveLock password.
A BIOS administrator password is required for this feature and is set as
the DriveLock master password.
Erases all data on selected hard drive; typically used prior to		N/A
repurposing or donation (Not supported under RAID mode or on SSDs)
Uses a built-in command drive to erase data on an SSD		N/A
		N/A
Allows custom configuration of an asset tag (up to 18 characters)	Serial Number	No
Allows custom configuration of an ownership tag (up to 40 characters)	Blank	No
Allows custom configuration of an ownership tag (up to 40 characters)	Blank	No

7