HP Business Notebook and Desktop PC F10 setup overview

,
15
Feature
Function Default setting,
if applicable
Reboot
required

Accessory USB Ports
Yes
– USB Port 1 Sets USB port status Enabled Yes
– USB Port 2 Sets USB port status Enabled Yes
– USB Port 3 Sets USB port status Enabled Yes
– USB Port 4 Sets USB port status Enabled Yes
– USB Port 5 Sets USB port status Enabled Yes
– USB3 Port 1 Sets USB port status Enabled Yes
Slot Security Note: Information displayed may vary with form factor Yes
 PCI Express x16 Slot 1
Sets PCI Express x16 slot availability Enabled Yes
 PCI Express x4 Slot 1
Sets PCI Express x4 slot availability Enabled Yes
 PCI Express x1 Slot 1
Sets PCI Express x1 slot availability Enabled Yes
 PCI Express x1 Slot 2
Sets PCI Express x1 slot availability Enabled Yes
 PCI Express x1 Slot 3
Sets PCI Express x1 slot availability Enabled
Yes
Network Boot Sets network boot status Enabled Yes
System IDs Sets Asset Tag, Ownership Tag, Keyboard Layout, and UUID No
Master Boot Record Security Protects MBR from corruption Disabled Yes
System Security Yes
 Data Execution Prevention
Enables DEP to protect against certain OS security breaches on Intel-
based systems
Enabled
Yes
 Virtualization Technology (VTx)
Enables VT on Intel-based systems Disabled Yes
 Virtualization Technology
Directed I/O (VTd)
Grants virtual machines direct access to peripheral devices on select
Intel-based systems
Disabled Yes
 Trusted Execution Technology
Enables Trusted Execution Technology on select Intel-based systems
Note: Enabling this feature disables OS management of Embedded
Security Device, prevents a reset of the Embedded Security Device, and
prevents the configuration of VTx, VTd, and Embedded Security Device.
Disabled Yes
 Embedded Security Device
Enables Trusted Platform Module (TPM)
Note: Configuring the Embedded Security Device requires a setup
password.
Enabled Yes
– Reset to Factory Settings Disables TPM and resets credentials Do not reset Yes
 Measure boot variables/devices
to PCR1
Prevents changes in boot device configuration (e.g. adding to or
changing boot order) from causing Bitlocker recovery mode
Disabled Yes
 OS Management of Embedded
Security Device
Allows OS to manage TPM Enabled Yes
– Reset of Embedded Security
Device through OS
Allows reset of TPM to be initiated from the OS Disabled Yes
– No PPI Provisioning Allows the OS to take immediate control of the Embedded Security
Device without requiring user interaction.
Disabled Yes
– Allow PPI policy to be
changed by OS
Allows the OS to change how the user is prompted for changes to the
Embedded Security Device
Disabled
Yes
 Button Retask Password
Protection
Prevents All-in-One bezel buttons from being retasked without
administrator privileges
Disabled Yes