HP PC Commercial BIOS (UEFI) Setup Administration Guide For Commercial Platforms using HP BIOSphere Gen 3-5 2016 -2019 Technical Whitepaper

HP PC Commercial BIOS (UEFI) Setup
June 2019
919946-004
© Copyright 2016-2019 HP Development Company, L.P.
4 Security Menu 26
4.8 Hard Drive Utilities Menu
This submenu provides features that protect the data on individual hard drives, such as recovering the master boot record
(MBR), preventing unauthorized access, and erasing data.
Table 16 Hard Drive Utilities Menu features
Feature
Type
Description
Default
Notes
 Save/Restore MBR of
the system hard drive
Setting
When checked, saves a baseline MBR that can be restored
if a change is detected
NOTE: Not applicable for UEFI boot modes
Unchecked
Reboot
Required
 Save/Restore GPT of
System Hard Drive
Setting
When checked, saves a baseline GUID Partition Table that
can be restored if a change is detected.
NOTE: Not applicable for Legacy boot modes
Prior to 2016: Did not exist
Unchecked
Reboot
Required
Boot Sector (MBR/GPT)
Recovery Policy
Setting
Allows selection of the default action when an MBR/GPT
event occurs.
Local User
Control
DriveLock/Automatic
DriveLock
Menu
DriveLock prevents unauthorized access to the contents of
a selected hard drive.
Secure Erase
Select a Drive…
Action
Uses hardware-based methods to erase safely all data
and personal information from a selected Hard Drive.
Reboot
Required
 Allow OPAL Hard Drive
SID Authentication
Setting
Allows for higher security on self-encrypting drives that
support SID Authentication. If enabled, 3
rd
parties
(including some encryption software) are not allowed to
perform certain drive activities.
Unchecked
Reboot
Required