Desktop Management Guide Business PCs
© Copyright 2007 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. Microsoft, Windows, and Windows Vista are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. Intel and vPro are trademarks of Intel Corporation in the U.S. and other countries. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.
About This Book This guide provides definitions and instructions for using security and manageability features that are preinstalled on some models. WARNING! Text set off in this manner indicates that failure to follow directions could result in bodily harm or loss of life. CAUTION: Text set off in this manner indicates that failure to follow directions could result in damage to equipment or loss of information. NOTE: Text set off in this manner provides important supplemental information.
iv About This Book ENWW
Table of contents 1 Desktop Management Overview 2 Initial Configuration and Deployment HP OpenView Agent ............................................................................................................................ 3 Altiris Deployment Solution Agent ........................................................................................................ 3 3 Remote System Installation 4 Software Updating and Management HP Client Management Interface ...........................................
10 Industry Standards 11 Asset Tracking and Security Password Security .............................................................................................................................. 26 Establishing a Setup Password Using Computer Setup .................................................... 26 Establishing a Power-On Password Using Computer Setup ............................................. 26 Entering a Power-On Password ........................................................................
1 Desktop Management Overview HP Client Management Solutions provides standards-based solutions for managing and controlling desktops, workstations, and notebook PCs in a networked environment. HP pioneered desktop manageability in 1995 with the introduction of the industry’s first fully manageable desktop personal computers. HP is a patent holder of manageability technology.
2 Initial Configuration and Deployment The computer comes with a preinstalled system software image. After a brief software “unbundling” process, the computer is ready to use. You may prefer to replace the preinstalled software image with a customized set of system and application software. There are several methods for deploying a customized software image. They include: ● Installing additional software applications after unbundling the preinstalled software image.
HP OpenView Agent NOTE: HP OpenView Agent is not currently available for Windows Vista. The management agent used by both HP OpenView Client Configuration Manager and HP OpenView PC Configuration Management Solution is pre-loaded on the computer. When installed, it enables communication with the HP OpenView management console. To install the HP OpenView Agent: 1. Click Start. 2. Click All Programs. 3. Click HP Manageability. 4. Click Radia Management Agent Readme. 5.
3 Remote System Installation Remote System Installation allows you to start and set up the system using the software and configuration information located on a network server by initiating the Preboot Execution Environment (PXE).
4 Software Updating and Management HP provides several tools for managing and updating software on desktops, workstations, and notebooks: ● HP Client Management Interface ● HP System Software Manager ● HP Client Manager ● HP ProtectTools Security Manager ● HP Client Premium Suite ● HP Client Foundation Suite ● HP OpenView Client Configuration Manager (not currently available for Windows Vista) ● HP OpenView PC Configuration Management Solution (not currently available for Windows Vista) ●
HP Client Management Interface used in conjunction with system management software can: ● Request in-depth client inventory information—Capture detailed information about the processors, hard drives, memory, BIOS, drivers, including sensor information (such as fan speed, voltage, and temperature).
Tight integration with HP Instant Support tools reduces hardware troubleshooting time.
● Altiris Local Recovery Pro ● Altiris AuditExpress For more information on HP Client Premium Suite, visit http://www.hp.com/go/easydeploy. HP Client Foundation Suite The HP Client Foundation Suite (HP CFS) is designed for organizations wanting essential client management functionality. It combines: ● HP Client Manager ● HP Systems Insight Manager Connector ● Altiris Migration Suite ● Altiris Local Recovery Pro For more information about the HP Client Foundation Suite, visit http://www.hp.
● Manage software on virtually any device, including desktops, workstations, and notebooks, in a heterogeneous or standalone infrastructure ● Manage software on most operating systems With continuous configuration management, HP customers report dramatic savings in IT costs, accelerated time-to-market for software and content, and increased user productivity and satisfaction. For more information on HP OpenView PC Configuration Management Solution, visit http://h20229.www2.hp.com/solutions/ascm/index.
HP Client Catalog for SMS Update management is an important function of maintaining any set of computers, from a single PC to an enterprise datacenter. The ability to identify which updates exist—and selectively deploy those updates in a timely and automated manner—can help maintain security and productivity for the managed organization. HP now offers a mechanism to streamline updates for HP systems within a Microsoft System Management Server management infrastructure.
Intel vPro-branded PCs with Active Management Technology Intel Active Management Technology (AMT) allows better discovery, healing, and protection of networked computing assets. With AMT, PCs can be managed whether the system is on, off, or the operating system is hung.
● ● ◦ ME Features Control—enable AMT, ASF, or none ◦ ME Power Control—configure management engine power policies Intel AMT Configuration ◦ Change AMT Password—required in order to configure AMT (the default password is admin) ◦ Host Name—allows administrator to assign a name to the client ◦ TCP/IP—allows administrator to assign an IP address or enable DHCP ◦ Provisioning Server—allows administrator to assign IP address of provisioning server ◦ Provision Model—allows administrator to configure
Retired Solutions Two software packages, Altiris Local Recovery, and Dantz Retrospect, will no longer be shipping on HP business desktops, notebooks, or workstations. Starting with new business desktops, notebooks, and workstations released in 2006, all will ship with HP Backup and Recovery Manager.
5 ROM Flash The computer's BIOS is stored in a programmable flash ROM (read only memory). By establishing a setup password in the Computer Setup (F10) Utility, you can protect the ROM from being unintentionally updated or overwritten. This is important to ensure the operating integrity of the computer. Should you need or want to upgrade the BIOS, you may download the latest BIOS images from the HP driver and support page, http://www.hp.com/support/files.
6 Boot Block Emergency Recovery Mode Boot Block Emergency Recovery Mode permits system recovery in the unlikely event of a ROM flash failure. For example, if a power failure were to occur during a BIOS upgrade, the ROM flash would be incomplete. This would render the system BIOS unusable. The Boot Block is a flash-protected section of the ROM that contains code that checks for a valid system BIOS image when the system is turned on. ● If the system BIOS image is valid, the system starts normally.
7 Replicating the Setup The following procedures give an administrator the ability to easily copy one setup configuration to other computers of the same model. This allows for faster, more consistent configuration of multiple computers. NOTE: Both procedures require a diskette drive or a supported USB flash media device, such as an HP Drive Key. Copying to Single Computer CAUTION: A setup configuration is model-specific.
Copying to Multiple Computers CAUTION: A setup configuration is model-specific. File system corruption may result if source and target computers are not the same model. For example, do not copy the setup configuration from a dc7xxx PC to a dx7xxx PC. This method takes a little longer to prepare the configuration diskette or USB flash media device, but copying the configuration to target computers is significantly faster.
To create a bootable USB flash media device, you must have: ● a supported USB flash media device ● a bootable DOS diskette with the FDISK and SYS programs (If SYS is not available, FORMAT may be used, but all existing files on the USB flash media device will be lost.) ● a PC that is bootable from a USB flash media device CAUTION: Some older PCs may not be bootable from a USB flash media device.
NOTE: The default boot order varies from computer to computer, and it can be changed in the Computer Setup (F10) Utility. If you have used a DOS version from Windows 9x, you may see a brief Windows logo screen. If you do not want this screen, add a zero-length file named LOGO.SYS to the root directory of the USB flash media device. Return to Copying to Multiple Computers on page 17.
13. Plug in the power cord, remove the diskette, and turn on the computer. 14. As soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup. Press Enter to bypass the title screen, if necessary. 15. Go to Advanced > PCI Devices and re-enable the PATA and SATA controllers that were disabled in step 6. Put the SATA controller on its original IRQ. 16. Save the changes and exit. The computer will boot to the USB flash media device as drive C.
8 Dual-State Power Button With Advanced Configuration and Power Interface (ACPI) enabled, the power button can function either as an on/off switch or as a standby button. The standby feature does not completely turn off power, but instead causes the computer to enter a low-power standby state. This allows you to power down quickly without closing applications and to return quickly to the same operational state without any data loss.
9 HP Web Site Support HP engineers rigorously test and debug software developed by HP and third-party suppliers, and develop operating system specific support software, to ensure performance, compatibility, and reliability for HP computers. When making the transition to new or revised operating systems, it is important to implement the support software designed for that operating system.
10 Industry Standards HP management solutions integrate with other systems management applications, and are based on industry standards, such as: ENWW ● Web-Based Enterprise Management (WBEM) ● Windows Management Interface (WMI) ● Wake on LAN Technology ● ACPI ● SMBIOS ● Pre-boot Execution (PXE) support 23
11 Asset Tracking and Security Asset tracking features incorporated into the computer provide key asset tracking data that can be managed using HP Systems Insight Manager, HP Client Manager, HP OpenView PC Configuration Management, OpenView Client Configuration Manager, and Asset Management solutions (not currently available for Windows Vista), or other system management applications.
Table 11-1 Security Features Overview (continued) Option Description See the Computer Setup (F10) Utility Guide on the Documentation and Diagnostics CD for more information. Password Options (This selection will appear only if a power-on password is set.) Allows you to specify whether the password is required for warm boot (Ctrl +Alt+Del). See the Computer Setup (F10) Utility Guide on the Documentation and Diagnostics CD for more information.
Table 11-1 Security Features Overview (continued) Option Description DriveLock (some models) Allows you to assign or modify a master or user password for ATA hard drives. When this feature is enabled, the user is prompted to provide one of the DriveLock passwords during POST. If neither is successfully entered, the hard drive will remain inaccessible until one of the passwords is successfully provided during a subsequent cold-boot sequence.
on Warm Boot. When Password Prompt on Warm Boot is enabled, the password must also be entered each time the computer is rebooted. 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart. 2. As soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup. Press Enter to bypass the title screen, if necessary.
Changing a Power-On or Setup Password If the system is equipped with an embedded security device, refer to the HP ProtectTools Security Manager Guide at http://www.hp.com. 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. 2. To change the Power-On password, go to step 3. To change the Setup password, as soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup.
National Keyboard Delimiter Characters / Arabic - Greek / Russian = Belgian . Hebrew - Slovakian - BHCSY* - Hungarian - Spanish / Brazilian - Italian / Swedish/Finnish / Chinese / Japanese - Swiss - Czech / Korean / Taiwanese - Danish - Latin American / Thai ! French - Norwegian . Turkish é French Canadian - Polish / U.S.
If a locked hard drive is present, POST will require a password to unlock the device. If a power-on password is set and it matches the device’s user password, POST will not prompt the user to re-enter the password. Otherwise, the user will be prompted to enter a DriveLock password. On a cold boot, either the master or the user password may be used. On a warm boot, enter the same password used to unlock the drive during the preceding cold-boot. Users will have two attempts to enter a correct password.
Smart Cover Sensor CoverRemoval Sensor, available on some models, is a combination of hardware and software technology that can alert you when the computer cover or side panel has been removed. There are three levels of protection, as described in the following table. Table 11-2 Smart Cover Sensor Protection Levels Level Setting Description Level 0 Disabled Smart Cover Sensor is disabled (default).
3. Select Security > Smart Cover > Cover Lock > Lock option. 4. Before exiting, click File > Save Changes and Exit. Unlocking the Smart Cover Lock 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart. 2. As soon as the computer is turned on, press F10 when the monitor light turns green to enter Computer Setup. Press Enter to bypass the title screen, if necessary.
http://h18004.www1.hp.com/products/security/.
Fault Notification and Recovery Fault Notification and Recovery features combine innovative hardware and software technology to prevent the loss of critical data and minimize unplanned downtime. If the computer is connected to a network managed by HP Client Manager, the computer sends a fault notice to the network management application. With HP Client Manager Software, you can also remotely schedule diagnostics to automatically run on all managed PCs and create a summary report of failed tests.
Index A access to computer, controlling 24 Active Management Technology, Intel vPro-branded PCs with 11 Altiris AClient 3 Deployment Solution Agent 3 asset tracking 24 B backup 10 Backup and Recovery Manager 10 BIOS Boot Block Emergency Recovery Mode 15 HPQFlash 14 Remote ROM Flash 14 Boot Block Emergency Recovery Mode 15 bootable device creating 17 DiskOnKey 17, 19 HP Drive Key 17, 19 USB flash media device 17 C cable lock provision 32 cautions cover lock security 31 FailSafe Key 32 protecting ROM 14 chan
OpenView Client Configuration Manager 8 OpenView PC Configuration Management Solution 8 operating systems, important information about 22 ordering FailSafe Key 32 P password changing 28 clearing 29 deleting 28 power-on 26, 27 security 26 setup 26, 27 PC deployment 2 PCN (Proactive Change Notification) 12 power button configuring 21 dual-state 21 power supply, surge-tolerant 34 power-on password changing 28 deleting 28 entering 27 setting 26 Preboot Execution Environment (PXE) 4 preinstalled software image 2
