HP Sure Start Automatic Firmware Intrusion Detection and Repair System - White Paper

May 2016

902696-002

HP Sure Start Technical White Paper

1 Introduction 2

Regardless of the source of corruption, HP Sure Start automatically repairs the firmware / BIOS.

Figure 1 Possible sources of firmware corruption

1.1 Enhancements for 2015

HP introduced Sure Start in 2013. Since that time, HP has enhanced Sure Start and expanded the number of products that

use Sure Start. HP is pleased to provide the 2nd Generation of Sure Start across the entire 2015 Elite product lineup,

including Tablets, Notebooks, Desktops, and All in Ones (AIO's).

Significant enhancements include the following:

 Windows Event Viewer Support. The Windows Event Viewer now includes HP Sure Start events to provide enhanced

visibility to the local user as well as remote management tools.

 Dynamic Protection.

Independent of the host CPU and main memory dedicated to the user Operating System, Sure

Start hardware periodically checks the integrity of the HP firmware and HP BIOS boot images stored in the non-volatile

(flash) memory even while the OS is running. Dynamic Protection provides an early warning of an attack to the boot

image.

HP Sure Start with Dynamic Protection supported on select Intel® based 800 G3 series commercial notebooks and 800 G2 series

commercial desktops, retail systems, and on 2015 HP Elite products with Intel(R) 6th generation processors and higher

Unknown

BIOS

Corruption

Accidental

Corruption

Intentional

Malicious

Corruption

HP Sure Start recovers

the BIOS

for uninterrupted

productivity, anytime,

anywhere.

HP Sure

Start