Technical white paper

 

UEFI pre-boot guidelines and

 

Microsoft® Windows® 8 UEFI

 

Secure Boot for HP Business PCs

 

PPS business notebooks, desktop, and workstations

 

Table of contents

 

UEFI pre-boot guidelines......................................................................................................................................................

3

Supported models ............................................................................................................................................................

3

HP_TOOLS for HP UEFI and pre-boot applications.......................................................................................................

3

UEFI and custom imaging ................................................................................................................................................

4

UEFI architecture ...............................................................................................................................................................

4

How BIOS launches UEFI applications ............................................................................................................................

6

Creating or restoring an HP_TOOLS partition on the hard drive.................................................................................

7

Errors when launching the pre-boot applications (notebooks only)..........................................................................

7

Pre-boot security requirements (notebooks only).......................................................................................................

7

Secure Boot overview...........................................................................................................................................................

8

Firmware policies ..................................................................................................................................................................

8

Firmware policies for notebooks ....................................................................................................................................

8

Firmware boot policy for desktops and workstations .................................................................................................

9

Secure Boot Key management for notebooks...........................................................................................................

10

Secure Boot Key management for desktops and workstations ..............................................................................

11

If Secure Boot verification fails.....................................................................................................................................

12

The BIOS Signing Key.....................................................................................................................................................

12

TPM and measured boot...............................................................................................................................................

12

POST ................................................................................................................................................................................

13

Windows 8 Hybrid Boot and flash................................................................................................................................

13

BitLocker .........................................................................................................................................................................

14

Boot order .......................................................................................................................................................................

14

OA3...................................................................................................................................................................................

17

Computrace ....................................................................................................................................................................

18

F10 Restore Default Behavior ......................................................................................................................................

18

Appendix..............................................................................................................................................................................

22

General UEFI requirements...........................................................................................................................................

22

PCR boot measurements for notebook products......................................................................................................

22

For more information ........................................................................................................................................................

23