HP PC Commercial BIOS (UEFI) Setup Administration Guide For Commercial Platforms using HP BIOSphere Gen 3-5 2016 -2019 Technical Whitepaper

HP PC Commercial BIOS (UEFI) Setup
June 2019
919946-004
© Copyright 2016-2019 HP Development Company, L.P.
4 Security Menu 25
You cannot provision SPM and activate HP Sure Run directly from the BIOS Setup interface. You can provision SPM using HP
Client Security Manager Software or the HP Manageability Integration Kit. When provisioned, the controls in this menu can
be used to deprovision the system or deactivate HP Sure Run.
Table 14 Secure Platform Management Menu features
Feature
Type
Description
Default
Notes
HP Sure
Run
Current
State
Setting
(Display
Only)
• Inactive
• Active
Inactive
Deactivate
HP Sure
Run
Action
This action deactivates HP Sure Run without deprovisioning SPM.
SPM
Current
State
Setting
(Display
Only)
• Provisioned
• Unprovisioned
Unprovisioned
Unprovision
SPM
Action
This action deprovisions SPM, which causes HP Sure Run to revert to
the Inactive state and return HP Sure Recover to default settings.
4.7 Enhanced BIOS Authentication Mode (EBAM)
This submenu allows the administrator to disable and unprovision the EBAM alternative authentication method and keys
when this feature is fully enabled by associated software. Initialization and provisioning of the feature may be supported by
future HP Manageability Integration Kit releases.
Table 15 Enhanced BIOS Authentication Mode (EBAM) Menu features
Feature
Type
Description
Default
Notes
EBAM Current State:
Disabled
Setting
(Display
Only)
Disable EBAM
Action
This action deactivates HP Enhanced BIOS
Authentication Mode.
Local Access Key:
Not Present
Setting
(Display
Only)
Clear EBAM Local Access Key(s) and
Reboot
Action
This action deletes all currently established EBAM
Local Access Keys.