HP Sure Start Automatic Firmware Intrusion Detection and Repair System - White Paper

May 2016

902696-002

HP Sure Start Technical White Paper

3 Architectural Overview & Capabilities 8

Figure 4 Windows Event Viewer showing Sure Start events

The following events will trigger the HP Notifications Software to gather all event from the Sure Start subsystem and

ensure that the Windows Event Viewer is updated with any events that are not already recorded there:

 Windows Boot

 Windows Resume from Sleep / Hibernate

 Sure Start with Dynamic protection runtime event notifications

HP Notifications Software will populate the HP Sure Start events into a unique “HP Sure Start” application event log versus

the general Windows Event Viewer. Only HP Sure Start events will be included in this log. The Windows Event Viewer path to

the HP Sure Start events is the following: System Tools/ Event Viewer/ Applications and Services Logs / HP Sure Start

The Windows Event Viewer level categories related to HP Sure Start event are defined in Table 3.

The events will be populated into Windows Event Viewer in the order that they were generated by HP Sure Start. The oldest

event in the HP Sure Start subsystem will be added to the Windows Event Viewer first and the more recent event shall be

added last.

The timestamp for each Windows Event Viewer entry will be the time it was added to that log, NOT the time the event

actually occurred. Each Sure Start Windows Event Viewer entry will include detailed data within the event details, which

includes the timestamp of the actual occurrence.

NOTE:

Events are persistent in the HP Sure Start system even after being copied to the Windows Event Viewer. In the event that

the Windows Event Viewer is cleared, the HP Notifications Software application will replace all HP Sure Start entries on the

next event that triggers it to check for HP Sure Start event logs.