HP Sure Start for AMD Technical whitepaper

July 2019

L75214-001

HP Sure Start for AMD

3 User notifications, event logging, and policy management 10

3 User notifications, event logging, and

policy management

3.1 HP Sure Start for AMD end user notifications

Under normal operating conditions, HP Sure Start for AMD is invisible to the user. When HP Sure Start for AMD identifies a

problem, recovery operations are automatic, using the default settings with no end user or IT interaction usually required.

If any significant event is detected or action is taken, HP Sure Start for AMD displays a warning message on the next boot.

3.2 HP Sure Start for AMD event logging

The HP Endpoint Security Controller records critical events related to the firmware/BIOS code and data monitored by HP Sure

Start for AMD. These events are stored within the Sure Start nonvolatile memory store. When HP Notifications software is

installed, the events are copied from the HP ESC to the Windows Event Viewer to facilitate access to these events by the local user

as well as the customer’s preferred manageability agent.

The following events trigger the HP Notifications Software to gather all events from the HP Sure Start for AMD subsystem and

ensure that the Windows Event Viewer is updated with any events that are not already recorded there:

• Windows Boot

• Windows Resume from Sleep/Hibernate

• Runtime Sure Start for AMD events

HP Notifications Software populates HP Sure Start for AMD events into a unique “HP Sure Start” application event log. Only HP

Sure Start for AMD events will be included in this log. The Windows Event Viewer path to the HP Sure Start for AMD events is the

following: System Tools/Event Viewer/Applications and Services Logs/HP Sure Start.

The Windows Event Viewer level categories related to HP Sure Start for AMD events are defined in the table on the next page.

The events are populated into Windows Event Viewer in the order that they were generated by HP Sure Start for AMD. The oldest

event in the HP Sure Start for AMD subsystem is added to the Windows Event Viewer first and the most recent event is added last.

The timestamp for each Windows Event Viewer entry is the time it was added to that log, NOT the time the event occurred. Each

Sure Start Windows Event Viewer entry includes detailed data within the event details, which includes the timestamp of the actual

occurrence.

NOTE: Events are persistent in the HP Endpoint Security Controller even after being copied to the Windows Event Viewer. If the

Windows Event Viewer is cleared, the HP Notifications Software application will replace all HP Sure Start entries on the next event

that triggers it to check for HP Sure Start for AMD event logs.