HP 600B, Compaq 6200 Pro, Elite 7500 White Paper

Technical white paper

F10 Setup overview for 2012 HP Business Notebooks and Desktops

2012 Business PC Models

Table of contents

Executive summary 2 Supported models 2 Enhancements 2

Business notebook enhancements 2 Business desktop enhancements 2

HP business notebook F10 Setup features 2

File menu 2 Security menu 3 System configuration menu 3 Language support 3 F10 Setup options for HP business notebooks 3

HP business desktop F10 Setup features 10

File menu 10 Storage menu 10 Security menu 10 Power menu 10 Advanced menu 10 F10 Setup options for HP business desktops 11

For more information 15 Call to action 15

Executive summary

For more than 20 years HP has provided unique customer value through our internally developed Read Only Memory Basic Input/Output System (ROM BIOS). The BIOS is the set of routines that enable a computer to load the operating system and communicate with various devices such as the keyboard, the display, storage drives, slots, and ports. The HP BIOS allows a high degree of integration between the firmware and HP Professional Innovations1 such as HP ProtectTools, HP Power Assistant, and HP Client Management Solutions. HP F10 Setup, the BIOS configuration GUI provided with HP PCs, gives you access to the impressive set of features supported by our BIOS. This overview details the F10 Setup configuration options available to you for many of these features.

Supported models

The new F10 Setup is available on select models introduced in 2012.

 2012 HP EliteBook p series  2012 HP ProBook b series  2012 HP ProBook m series  2012 HP ProBook s series  2012 HP Compaq 8300 Elite series  2012 HP Compaq 6300 Pro series  2012 HP Compaq 6305 Pro series

Enhancements

HP has added several options to the new version of HP F10 Setup.

Business notebook enhancements

 Capability to create a backup image of the System BIOS  Secure Erase feature  USB charging port  Power control feature  Automatic power-on when AC is detected

Business desktop enhancements

 Secure Erase feature  EFI Diagnostics

HP business notebook F10 Setup features

HP F10 Setup features for business notebooks include file, security, and system configuration categories.

File menu

The File menu provides access to general options such as the following:

You can find more information about HP Professional Innovations at http://www .hp.com/go/professionalinnovations.

 View system information

Feature

Function

Default Setting, if applicable

File Menu

System Information

Provides key system information, such as serial number, model number, CPU type, and memory configuration

N/A

Set System Date and Time

Configures the date and time

N/A

 Set date and time  Exit F10 Setup with and without saving changes to settings  View system diagnostics

Security menu

The security menu provides access to security related options such as:

 Power-on and DriveLock passwords  Integrated security device configuration  Disk Sanitizer  Intel® Anti-Theft  Asset tag configuration

System configuration menu

The system configuration menu provides access to:

 Boot options  integrated device configuration  Port options  AMT options  F10 Setup feature access options

(on select models)

Language support

HP F10 Setup for business notebooks has extensive language support. You can display the GUI in English, French, German, Spanish, Italian, Dutch, Danish, Japanese, Norwegian, Portuguese, Swedish, Finnish, Chinese Traditional, or Chinese Simplified. Switch languages by using the Language options on the System Configuration page.

F10 Setup options for HP business notebooks

Table 1 provides a detailed list of F10 Setup options for HP business notebooks.

Table 1: Key features for F10 Setup on select 2012 HP business notebook PCs

For the use cases outlined in the Department of Defense 5220.22 M Supplement. Intel AT security requires a separately purchased Absolute Computrace service subscription and must be activated and configured. Check with Absolute

for availability in your country. Windows® required. Intel and HP assume no liability for lost or stolen data and/or systems, or any other damages resulting therefrom. See http://www.abs olute.com/en/partners/alliances/intel.

Intel Active Management Technology requires an Intel A MT-enabled chipset, network hardware a nd software, connection to a power source, and a

corporate network connection. Setup of this technology requires configuration by the purchaser. To enable certain functionality, setup may also require further integration into existing security frameworks or scripting using the management console. Implementation of new bus iness processes may also require modification.

Feature

Function

Default Setting, if applicable

System Diagnostics

Provides access to diagnostic features, such as the start-up test, run-in test, and hard disk test

N/A

 System Information

Provides system information, such as serial number, model, CPU, and memory

N/A

 Start-Up Test

Runs diagnostics on memory and storage

N/A

 Run-In Test

Performs a continuous diagnostics check on memory and hard disk

N/A

 Hard Disk Test (non HP image)

Performs a hard drive diagnostics check

N/A

 Hard Disk Test (HP image)

Performs a memory test, battery test, and system tune-up, as well as providing BIOS management, an error log, and language options

N/A Update System BIOS

Updates system firmware from the FAT 32 partition on the hard drive or from a USB Disk-on-key

N/A

Create a backup image of the System BIOS

Puts an image of the System BIOS on the HP_TOOLS partition. Does not work if a BIOS administrator has been set

N/A Restore Defaults

Restores F10 settings to factory defaults

N/A

Reset BIOS security to factory default

Resets BIOS and Protect Tool Users, clears fingerprint tokens, and resets the TPM

N/A

Ignore Changes and Exit

Exits F10 Setup without saving any changes made during the current session

N/A

Save Changes and Exit

Exits F10 Setup and saves all changes made during the current session

N/A

Security Menu

Administrator Tools

Setup BIOS Administrator Password

Establishes a power-on password that grants Administrator privileges

N/A

User Management

Manages BIOS and ProtectTools users (creates/deletes/resets passwords)

N/A

 Create New BIOS User Account

Creates additional BIOS user accounts. Enables the administrator to specify User ID Privilege level. Creates passwords set to User ID by default, but individual

users can change their assigned password.

N/A

Password Policy

Allows the selection of various rules to govern BIOS password authentication 5

N/A

 Password Minimum Length

Allows the administrator to specify the minimum number of characters required for the F10 power-on password

N/A

 At least one symbol required

Allows the administrator to require at least one symbol, such as $, %, ^, &, or #, for the F10 power-on password

Disabled

 At least one number required

Allows the administrator to require at least one number, such as 1, 2, or 3, for the F10 power-on password

Disabled

 At least one uppercase character

required

Allows the administrator to require at least one uppercase character, such as A, B, C, or D, for the F10 power-on password

Disabled

 At least one lowercase character

required

Allows the administrator to require at least one lowercase character, such as a, b, c, or d, for the F10 power-on password

Disabled

 Are spaces allowed in Password?

Allows the administrator to permit spaces, such as New York, in the F10 power-on password

Disabled

A BIOS Administrator password is required.

Feature

Function

Default Setting, if applicable

System Management Command

Allows authorized personnel to reset security settings during a service event

Enabled

HP SpareKey

Allows users to establish a set of failsafe questions to recover a lost power-on password

Enabled

Fingerprint Reset on Reboot (if present)

Clears all registered fingerprints

Disabled

Save/Restore Master Boot Record (MBR) of the system Hard Drive

Saves a baseline MBR that can be restored if a change is detected

Disabled

User Tools

Change Password

Changes BIOS user password

N/A

HP SpareKey Enrollment

Allows user configure of HP SpareKey by answering any three of ten questions for enrollment

N/A Anti-Theft

Allows configuration of Intel Anti-Theft feature

Enabled

DriveLock

Allows configuration of DriveLock Master and User passwords

Disabled

Automatic DriveLock

Requires BIOS Admin password

Disabled

TPM Embedded Security

Manages TPM module settings

 Embedded Security Device

Availability

Exposes the integrated TPM module

Available

 Embedded Security Device State

Enables the integrated TPM module

Disabled

 TPM Reset to Factory Defaults

Returns the TPM Embedded Security settings to factory default

 Power-On Authentication Support

Enables multifactor authentication at power-on

Disabled

 Reset Authentication Credential

Resets credentials

 OS Management of TPM

Allows the operating system to manage the TPM module

Enabled

 Reset of TPM from OS

Allows the reset of the TPM module from within the operating system

Disabled

Utilities

Disk Sanitizer

Erases all data on the selected hard drive, typically prior to repurposing or donating the computer (not supported under RAID mode or on SSDs)

N/A Secure Erase

Runs inside the drive hardware to overwrite data contained on the drive

N/A System IDs

 Asset Tracking Number

Allows custom configuration of an asset tag (up to 18 characters)

Serial Number

 Ownership Tag

Allows custom configuration of an ownership tag (up to 40 characters)

Blank

 Ownership Tag 2

Allows custom configuration of a second ownership tag (up to 40 characters)

Blank

System Configuration Menu

Language

Selects from among 14 languages

English

Boot Options

 Startup Menu Delay (Sec.)

Allows user configuration of the amount of time the Startup Menu is displayed during POST

+ 10 hidden pages