Computer Setup-Security - HP Z8 G4 Maintenance And Service Manual

Computer Setup—Security
NOTE: Support for specific Computer Setup options may vary depending on the hardware configuration.
Table 5-2 Computer Setup—Security
Option
Create BIOS Administrator
Password
Change BIOS Administrator
Password (This selection is
active only if a BIOS
administrator password is
set.)
Password Policies
Security Configuration
Description
Lets you set and enable a BIOS administrator password, which includes the following privileges:
● Manage other BIOS users
● Full access to BIOS policy and settings
● Unlock the computer when other BIOS users fail the preboot authentication.
NOTE: Creating a BIOS user disables the Fast Boot option.
NOTE: If the password is set, it is required to change Computer Setup options, update the BIOS, and make
changes to certain plug and play settings under Windows.
Lets you change the BIOS administrator password.
You must know the current password to be able to change it.
Let you set the guidelines for a valid password. Options include:
● Password minimum length
● Requires at least one symbol
● Requires at least one number
● Requires at least one upper case character
● Requires at least one lower case character
● Allow spaces
Clear Password Jumper
Select 'Honor' to allow or 'Ignore' to not allow the absence of the password jumper to clear the passwords at
boot up. Default is 'Honor'.
TPM Embedded Security
● TPM Device
Lets you set the Trusted Platform Module as available or hidden.
● Clear TPM
Select to reset the TPM to an unowned state. After the TPM is cleared, it is also turned off. To
temporarily suspend TPM operations, turn the TPM off instead of clearing it.
CAUTION: Clearing the TPM resets it to factory defaults and turns it off. You will lose all created keys
and data protected by those keys.
BIOS Sure Start
Verify Boot Block on every Boot
●
Select to check validity of boot block region each boot. If not selected, boot block region will be
validated on power cycles.
● Data Recovery Policy
Select 'Automatic' or 'Manual' to set data recovery policy. 'Manual' lets you select whether or not to
execute recovery of a corrupted region if it is detected.
Computer Setup (F10) Utilities 41