HP ProtectTools Security Manager: using BIOS Configuration

Welcome to HP's demonstration on using the BIOS Configuration feature in HP ProtectTools Security Manager, a complementary feature embedded in all HP enterprise class PCs to enhance security. In this demo, you'll learn how to enhance the security of your PC by configuring BIOS settings in this simple and easy-to-use interface. The HP ProtectTools Security Manager is free and inherent in all HP commercial products.

HP ProtectTools Security Manager enables you to control several layers of security from a common interface. For example, you can use the Credential Manager feature to enable Single Sign On, creating secure storage of your user names and passwords. In addition, you can select a higher level of authentication by enabling a smart card or fingerprint reader for added security.

Another important feature built into HP business notebook PCs is a Trusted Platform Module (or T-P-M) security chip, which lets you activate platform authentication. The TPM chip has a unique key burned in during manufacturing that protects against unauthorized use of your notebook PC. This security begins before the operating system even loads.

Now that you know some of the features offered by HP ProtectTools Security Manager, let's take a look at BIOS configuration.

Basic Input/Output System settings identify and control your computer's hardware components, preparing them to be used by the operating system after boot-up. The settings are stored on a chip within your PC.

You can access various BIOS settings upon boot-up by pressing the F10 key when prompted. You can much more easily access BIOS settings, however, after the Windows operating system loads. You can do this by using HP ProtectTools Security Manager. Let's get started.

Click BIOS Configuration in the left pane.

After you expand BIOS Configuration, you see three options: File, Security and System Configuration. Let's look at the File options first.

Click File.

The File screen lists important information specific to your system.

Now let's explore the Security options. Click Security in the left pane.

To set a password for changing security settings within this interface, click the Set button in the upper-right corner. Enter a password and confirm it in the dialog box that appears, and then click OK.

To set a power-on password, click Set in the Power-On Password section. Enter a password in the dialog box, confirm it and then click OK.

You can enable this option to require users to enter a password upon restarting the PC.

If you have a smart card, enable it here.

This is the section in which you can configure TPM security settings.

This PC has TPM Embedded Security available.

Now let's explore the System Configuration options. Click System Configuration in the left pane.

Port options let you enable or disable ports, such as serial, parallel, USB, 1394 (FireWire) and so on. Disabling ports prevents you and other users from connecting to and using devices on those ports.

Why disable a port? You might want to disable the USB port, for example, to prevent an unauthorized person from using a removable flash drive to copy files or install programs.

Boot options enable you to change the number of seconds that elapse during which you can press the F10 key prior to boot-up to access boot settings through the native BIOS environment.

These boot options let you control which devices you can use to boot your PC and the order in which they're used by the system.

Device configuration options improve the usability of your PC. For example, the USB Legacy Support option enables you to use a USB mouse, keyboard or hub even when Windows isn't loaded.

You can enable or disable a variety of built-in device options in this section, as needed.

Once you've made all of your desired changes, click OK.

Your computer will require a restart before all of the changes take effect.

This completes our demonstration of HP ProtectTools Security Manager BIOS Configuration feature. You've learned how to configure BIOS settings in the software, which is more efficient and easier to use than the pre-boot F10 method. To end this demonstration, close the web browser demo window.