HP Business Notebook and Desktop PC F10 setup overview
, 
15 
Feature 
Function  Default setting, 
if applicable 
Reboot 
required 
 
Accessory USB Ports
    Yes 
–  USB Port 1  Sets USB port status  Enabled  Yes 
–  USB Port 2  Sets USB port status  Enabled  Yes 
–  USB Port 3  Sets USB port status  Enabled  Yes 
–  USB Port 4  Sets USB port status  Enabled  Yes 
–  USB Port 5  Sets USB port status  Enabled  Yes 
–  USB3 Port 1  Sets USB port status  Enabled  Yes 
Slot Security  Note: Information displayed may vary with form factor    Yes 
  PCI Express x16 Slot 1 
Sets PCI Express x16 slot availability  Enabled  Yes 
  PCI Express x4 Slot 1 
Sets PCI Express x4 slot availability  Enabled  Yes 
  PCI Express x1 Slot 1 
Sets PCI Express x1 slot availability  Enabled  Yes 
  PCI Express x1 Slot 2 
Sets PCI Express x1 slot availability  Enabled  Yes 
  PCI Express x1 Slot 3 
Sets PCI Express x1 slot availability  Enabled 
Yes 
Network Boot  Sets network boot status   Enabled  Yes 
System IDs  Sets Asset Tag, Ownership Tag, Keyboard Layout, and UUID    No 
Master Boot Record Security  Protects MBR from corruption  Disabled  Yes 
System Security      Yes 
  Data Execution Prevention 
Enables DEP to protect against certain OS security breaches on Intel-
based systems 
Enabled 
Yes 
  Virtualization Technology (VTx) 
Enables VT on Intel-based systems 
Disabled  Yes 
  Virtualization Technology 
Directed I/O (VTd) 
Grants virtual machines direct access to peripheral devices on select 
Intel-based systems 
Disabled  Yes 
  Trusted Execution Technology 
Enables Trusted Execution Technology on select Intel-based systems 
Note: Enabling this feature disables OS management of Embedded 
Security Device, prevents a reset of the Embedded Security Device, and 
prevents the configuration of VTx, VTd, and Embedded Security Device. 
Disabled  Yes 
  Embedded Security Device 
 Enables Trusted Platform Module (TPM) 
Note: Configuring the Embedded Security Device requires a setup 
password. 
Enabled  Yes 
–  Reset to Factory Settings  Disables TPM and resets credentials  Do not reset  Yes 
  Measure boot variables/devices 
to PCR1 
Prevents changes in boot device configuration (e.g. adding to or 
changing boot order) from causing Bitlocker recovery mode 
Disabled  Yes 
  OS Management of Embedded 
Security Device 
Allows OS to manage TPM   Enabled  Yes 
–  Reset of Embedded Security 
Device through OS  
Allows reset of TPM to be initiated from the OS  Disabled  Yes 
–  No PPI Provisioning  Allows the OS to take immediate control of the Embedded Security 
Device without requiring user interaction. 
Disabled  Yes 
–  Allow PPI policy to be 
changed by OS 
Allows the OS to change how the user is prompted for changes to the 
Embedded Security Device 
Disabled 
Yes 
  Button Retask Password 
Protection 
Prevents All-in-One bezel buttons from being retasked without 
administrator privileges 
Disabled  Yes 










