Desktop Management. HP Compaq dc5750 SFF, Compaq dc5750 Small Form Factor PC, dc5750, Compaq dc5750 Microtower PC

3

Desktop Management

HP Client Management Solutions provides standards-based solutions for managing and controlling desktops, workstations, and notebook PCs in a networked environment.

The key capabilities and features of desktop management are:

■

■

■

■

■

■

Initial configuration and deployment

Remote system installation

Software updating and management

ROM flash

Asset tracking and security

Fault notification and recovery

✎

Support for specific features described in this guide may vary by model or software version.

3.1 Initial Configuration and Deployment

HP computers come with a preinstalled system software image. After a brief software

“unbundling” process, the computer is ready to be used.

A customized software image may be deployed by:

■

■

Installing additional software applications after unbundling the preinstalled software image.

Using software deployment tools, such as HP OpenView Client Configuration Manager, HP

OpenView PC Configuration Management Solutions, or Altiris Deployment Solution, to replace the preinstalled software with a customized software image.

■ Using a disk cloning process to copy the contents from one hard drive to another.

The best deployment method depends on your information technology environment and processes. The PC Deployment section of the HP Lifecycle Solutions Web site

( http://h20219.www2.hp.com/services/cache/80906-0-0-225-121.html

) provides information to help you select the best deployment method.

The Restore Plus! CD, ROM-based setup, and ACPI hardware provide further assistance with recovery of system software, configuration management and troubleshooting, and power management.

3–1 Service Reference Guide, dc5750 437963-001

Desktop Management

3.1.1 HP OpenView Agent

The Radia Management Agent (RMA) used by both HP OpenView Client Configuration

Manager and HP OpenView PC Configuration Management Solutions (Radia) is pre-loaded on the computer. When installed, it enables communication with the HP OpenView management console.

To install the Radia Management Agent:

1. Click

Start

.

2. Click

All Programs

.

3. Click

HP Manageability

.

4. Click

Radia Management Agent Readme

.

5. Review and follow the instructions contained in the Readme file to install the Radia

Management Agent.

3.1.2 Altiris Deployment Solution Agent

This program is pre-loaded on the computer. When installed, it enables communication with the administrator Altiris Deployment Solution console.

To install Altiris Deployment Solution Agent:

1. Click Start.

2. Click All Programs.

3. Click Software Setup.

4. Click Next.

5. Scroll down and click on the link to install Altiris AClient.

3.1.3 HP Backup and Recovery Manager

HP Backup and Recovery Manager can create the Restore Plus! CD set. This set includes the

Restore Plus! CD, the Operating system CD, and any Supplemental Software CDs.

Ä CAUTION: The Restore Plus! CD set will not include any system settings or user data created after the initial system setup.

To create the Restore Plus! CD set:

1. Click Start > HP Backup and Recovery > HP Backup and Recovery Manager to open the Backup and Recovery Wizard, then click Next.

2. Select Create factory software recovery CDs or DVDs to recover the system.

3. Follow the instructions in the wizard.

In addition to allowing you to create the Restore Plus! CD set, HP Backup and Recovery

Manager can be used to back up data and system files to the hard drive, to network drives, or to removable media, such as CDs, DVDs, or flash media. If data or system files are lost, deleted, or corrupted, Backup and Recovery Manager allows you to retrieve data or restore the last good system image.

3–2 437963-001 Service Reference Guide, dc5750


3.2 Remote System Installation

Remote System Installation allows you to start and set up your system using the software and configuration information located on a network server by initiating the Preboot Execution

Environment (PXE). The Remote System Installation feature is usually used as a system setup and configuration tool, and can be used for the following tasks:

■

■

■

Formatting a hard drive.

Deploying a software image on one or more new PCs.

Remotely updating the system BIOS in flash ROM. See Section 3.4.1, “Remote ROM

Flash.”

■ Configuring the system BIOS settings.

To initiate Remote System Installation, press

F12

when the F12 = Network Service Boot message appears in the lower-right corner of the HP logo screen. Follow the instructions on the screen to continue the process. The default boot order is a BIOS configuration setting that can be changed to always attempt to PXE boot.

3.3 Software Updating and Management

HP provides several tools for managing and updating software on desktops, workstations, and notebooks:

■

■

■

■

■

■

■

■

■

■

HP Client Manager Interface

HP System Software Manager

HP Client Manager

HP ProtectTools Security Manager

HP Client Premium Suite

HP Client Foundation Suite

HP OpenView Client Configuration Manager

HP OpenView PC Configuration Management Solutions

HP Proactive Change Notification

HP Subscriber's Choice

3.3.1 HP Client Management Interface

HP Client Management Interface (HP CMI) provides an interface to simplify the integration of business computers with popular industry system management tools (including Microsoft

Systems Management Server, IBM Tivoli Software, and HP OpenView Operations) and custom inhouse developed management applications. Using HP CMI, systems management tools and applications can request in-depth client inventory, receive health status information, and manage system BIOS settings by communicating directly with the client computer, reducing the need for agent or connector software to achieve integration.

✎

Some scripts are needed to access the HP CMI interface.

Service Reference Guide, dc5750 437963-001 3–3


When HP Client Management Interface is used in conjunction with system management software, it can:

■ Request in-depth client inventory information - Capture detailed information about the processors, hard drives, memory, BIOS, drivers, and sensor information (such as fan speed, voltage, and temperature)

■ Receive health status information - Subscribe for a wide range of client hardware alerts (such as over-temperature, fan stall, and hardware configuration changes) to be sent to the system management console, application, or to the local client computer. Alerts are sent real-time when triggered by hardware events.

■ Manage system BIOS settings - Perform F10 functions including setting and changing the

BIOS passwords and computer boot order remotely from the system management console of any or all of the client systems without having to visit each machine.

3.3.2 HP System Software Manager

HP System Software Manager (SSM) is a free utility that automates remote deployment of device drivers and BIOS updates for networked HP business PCs. When SSM runs, it silently

(without user interaction) determines the revision levels of drivers and BIOS installed on each networked client system and compares this inventory against system software SoftPaqs that have been tested and stored in a central file store. SSM then automatically updates any down-revision system software on the networked PCs to the later levels available in the file store. Since SSM only allows distribution of SoftPaq updates to the correct client system models, administrators can confidently and efficiently use SSM to keep system software updated.

System Software Manager integrates with enterprise software distribution tools such as

Microsoft Systems Management Server (SMS). Using SSM, you can distribute customer-created or third-party updates that have been packaged in the SSM-format.

SSM may be downloaded at no charge by visiting www.hp.com/go/ssm

.

3.3.3 HP Client Manager

HP Client Manager, developed with Altiris, is available free for supported HP business desktop, notebook, and workstation models. SSM is integrated into HP Client Manager and enables central tracking, monitoring, and management of the hardware aspects of HP client systems.

Use HP Client Manager to:

■

■

■

■

■

Get valuable hardware information such as CPU, memory, video, and security settings

Monitor system health to fix problems before they occur

Automatically acquire and install drivers and BIOS updates without visiting each PC

Remotely configure BIOS and security settings

Automate processes to quickly resolve hardware problems

Tight integration with HP Instant Support tools reduces hardware troubleshooting time.

■ Diagnostics—remotely run & view reports on HP desktop, notebook, and workstation models

■ System Health Scan—check for known hardware issues in your installed base of HP client systems

■ Active Chat—connect to HP customer support to resolve issues



■

■

■

■

HP Knowledgebase—link to expert information

Automated SoftPaq collection and delivery process for fast resolution of hardware problems

Identify, inventory, and initialize systems with HP ProtectTools embedded security chip

Option for health alerts to display locally on the client system

■ Report basic inventory information for non-HP clients

For more information on HP Client Manager, visit www.hp.com/go/clientmanager

.

3.3.4 HP ProtectTools Security Manager

■

■

■

■

ProtectTools Security Manager software provides security features that help protect against unauthorized access to the computer, networks, and critical data. Enhanced security functionality is provided by the following modules:

Smart Card Security for ProtectTools

Embedded Security for ProtectTools

BIOS Configuration for ProtectTools

Credential Manager for ProtectTools

The modules available for your computer may vary depending on your model. For example,

Embedded Security for ProtectTools requires that the Trusted Platform Module (TPM) embedded security chip (some models only) be installed on your computer, and Smart Card

Security for ProtectTools requires an optional smart card and reader.

ProtectTools modules may be preinstalled, preloaded, or available for purchase from the HP Web site. Visit http://www.hp.com/products/security

for more information.

3.3.5 HP Client Premium Suite

HP Client Premium Suite (HP CPS) is designed for organizations wanting full client hardware and software lifecycle management from a single, Web-based management console. It combines:

■

■

■

■

■

■

■

HP Client Manager

HP Systems Insight Manager Connector

HP OpenView Connector

Altiris Client Management Suite - Level 1

Altiris Connector Solution

Altiris Local Recovery Pro

Altiris AuditExpress

For more information on HP Client Management Premium Suite, visit http://www.hp.com/go/easydeploy

.

3.3.6 HP Client Foundation Suite

The HP Client Foundation Suite (HP CFS) is designed for organizations wanting essential client management functionality. It combines:

■

■

HP Client Manager

HP Systems Insight Manager Connector



■

■

Altiris Migration Suite

Altiris Local Recovery Pro

For more information about the HP Client Foundation Suite, visit http://www.hp.com/go/easydeploy

.

3.3.7 HP OpenView Client Configuration Manager

❏

❏

❏

❏

❏

❏

HP OpenView Client Configuration Manager is a simplified, out-of-the-box, and easy-to-use solution that solves immediate PC software configuration management needs.

■ Integrated software management

❏

❏

❏

❏

❏

Inventory collection

Operating system deployment and settings migration

Patch management

Software distribution

Software usage metering

■ Integrated hardware management

Remote control

HP alert monitoring

HP hardware driver and BIOS updates

Integration with HP ProtectTools

Free add-on support for Intel Active Management Technology (AMT)

Free version for basic hardware management of HP desktops and notebooks, and software and hardware maangement for HP Thin Clients.

For more information about the HP OpenView Client Configuration Manager, visit http://www.managementsoftware.hp.com/products/ccm/index.html

.

3.3.8 HP OpenView PC Configuration Management Solutions

HP OpenView Configuration Management solutions automate the management of software such as operating systems, applications, patches, content, and configuration settings to ensure that each computing device is maintained in the right configuration.

Proven across enterprises of every size and complexity, HP’s adaptive, policy-based model for software Configuration Management, automates the entire software lifecycle management process - from discovery, deployment, and ongoing management through to migration and retirement.

By substituting automation for manual intervention, HP helps its customers lower costs, significantly reduce software related problems, and ensure the software supporting their business operations is reliable and secure.

For more information on HP OpenView PC Configuration Management Solution, visit http://h20229.www2.hp.com/solutions/ascm/index.html

.



3.3.9 Proactive Change Notification

The Proactive Change Notification program uses the Subscriber's Choice Web site in order to proactively and automatically:

■ Send you Proactive Change Notification (PCN) e-mails informing you of hardware and software changes to most commercial computers and servers, up to 60 days in advance

■ Send you e-mail containing Customer Bulletins, Customer Advisories, Customer Notes,

Security Bulletins, and Driver alerts for most commercial computers and servers

You create your own profile to ensure that you only receive the information relevant to a specific

IT environment. To learn more about the Proactive Change Notification program and create a custom profile, visit http://h30046.www3.hp.com/subhub.php.

3.3.10 Subscriber’s Choice

Subscriber’s Choice is a client-based service from HP.

Based on your profile, HP will supply you with personalized product tips, feature articles, and/or driver and support alerts/notifications.

Subscriber’s Choice Driver and Support Alerts/Notifications will deliver e-mails notifying you that the information you subscribed to in your profile is available for review and retrieval. To learn more about Subscriber’s Choice and create a custom profile, visit http://h30046.www3.hp.com/subhub.php

.

3.3.11 Retired Solutions

Two software packages, Altiris Local Recovery, and Dantz Retrospect, will no longer be shipping on HP business desktops, notebooks, or workstations. Starting with new business desktops, notebooks, and workstations released in 2006, all will ship with HP Backup and

Recovery Manager.

The computer's BIOS is stored in a programmable flash ROM (read only memory). By establishing a setup password in the Computer Setup (F10) Utility, you can protect the ROM from being unintentionally updated or overwritten. This is important to ensure the operating integrity of the computer. Should you need or want to upgrade the BIOS, you may download the latest BIOS images from the HP driver and support page: http:\\h18000.www1.hp.com/support/files

.

CAUTION: For maximum ROM protection, be sure to establish a setup password. The setup password prevents unauthorized ROM upgrades. System Software Manager allows the system administrator to set the setup password on one or more PCs simultaneously. For more information, visit http://www.hp.com/go/ssm .

3.4.1 Remote ROM Flash

Remote ROM Flash allows the system administrator to safely upgrade the ROM on remote HP computers directly from the centralized network management console. Enabling the system administrator to perform this task remotely on multiple computers results in a consistent deployment of, and greater control over, HP PC BIOS images over the network. It also results in greater productivity and lower total cost of ownership.



✎

The computer must be powered on, or turned on through Remote Wakeup, to take advantage of

Remote ROM Flash.

For more information on Remote ROM Flash, refer to the HP Client Manager or System

Software Manager at http://h18000.www1.hp.com/im/prodinfo.html

.



3.4.2 HPQFlash

The HPQFlash utility is used to locally update or restore the system BIOS on individual PCs through a Windows operating system.

For more information on HPQFlash, visit http://www.hp.com/support/files

and enter the product name/number of the computer when prompted.

3.4.3 Boot Block Emergency Recovery Mode

■

■

Boot Block Emergency Recovery Mode permits system recovery in the unlikely event of a ROM flash failure. For example, if a power failure were to occur during a BIOS upgrade, the ROM flash would be incomplete. This would render the system BIOS unusable. The Boot Block is a flash-protected section of the ROM that contains code that checks for a valid system BIOS image when the system is turned on.

If the system BIOS image is valid, the system starts normally.

If the system BIOS image is not valid, a failsafe Boot Block BIOS provides enough support to search removable media for BIOS image files. If an appropriate BIOS image file is found, it is automatically flashed into the ROM.

When an invalid system BIOS image is detected, the system power LED will blink red 8 times, one blink every second. Simultaneously, the speaker will beep 8 times. If the portion of the system ROM containing the video option ROM image is not corrupt, “Boot Block Emergency

Recovery Mode” will be displayed on the screen.

To recover the system after it enters Boot Block Emergency Recovery Mode, complete the following steps:

1. Turn off the power.

2. Insert a diskette, CD, or USB flash device containing the desired BIOS image file in the root directory.

✎

Note: The media must be formatted using the FAT12, FAT16, or FAT32 file system.

3. Turn on the computer.

If the system successfully reprograms the ROM, the system will automatically power off.

4. Remove the removable media used to upgrade the BIOS.

5. Turn the power on to restart the computer.



3.4.4 Replicating the Setup

The following procedures give an administrator the ability to easily copy one setup configuration to other computers of the same model. This allows for faster, more consistent configuration of multiple computers.

✎

Both procedures require a diskette drive or a supported USB flash media device, such as an HP

Drive Key.

Copying to Single Computer

Ä CAUTION: A setup configuration is model-specific. File system corruption may result if source and target computers are not the same model. For example, do not copy the setup configuration from a dc7nnn PC to a dx7nnn PC.

1. Select a setup configuration to copy. Turn off the computer. If you are in Windows, click

Start > Shut Down > Shut Down.

2. If you are using a USB flash media device, insert it now.


4. As soon as the computer is turned on, press

F10

when the monitor light turns green to enter

Computer Setup. Press

Enter

to bypass the title screen, if necessary.

✎

If you do not press

F10

at the appropriate time, you must restart the computer and again press

F10

when the monitor light turns green to access the utility.

5. If you are using a a diskette, insert it now.

6. Select File > Replicated Setup > Save to Removable Media. Follow the instructions on the screen to create the configuration diskette or USB flash media device.

7. Turn off the computer to be configured and insert the configuration diskette or USB flash media device.

8. Turn on the computer to be configured.


F10



Enter


10. Select File > Replicated Setup > Restore from Removable Media, and follow the instructions on the screen.

11. Restart the computer when the configuration is complete.



Copying to Multiple Computers

Ä CAUTION: A setup configuration is model-specific. File system corruption may result if source and target computers are not the same model. For example, do not copy the setup configuration from a dc7nnn PC to a dx7nnn PC.

This method takes a little longer to prepare the configuration diskette or USB flash media device, but copying the configuration to target computers is significantly faster.

✎

A bootable diskette is required for this procedure or to create a bootable USB flash media device.

If Windows XP is not available to use to create a bootable diskette, use the method for copying to a single computer instead (see “Copying to Single Computer” ).

1. Create a bootable diskette or USB flash media device. See “Supported USB Flash Media

Device” or “Unsupported USB Flash Media Device.”

Ä CAUTION: Not all computers can be booted from a USB flash media device. If the default boot order in the Computer Setup (F10) Utility lists the USB device before the hard drive, the computer can be booted from a USB flash media device. Otherwise, a bootable diskette must be used.

2. Select a setup configuration to copy. Turn off the computer. If you are in Windows, click

Start > Shut Down > Shut Down.

3. If you are using a USB flash media device, insert it now.



F10



Enter


✎

If you do not press

F10


F10


6. If you are using a diskette, insert it now.

7. Select File > Replicated Setup > Save to Removable Media. Follow the instructions on the screen to create the configuration diskette or USB flash media device.

8. Download a BIOS utility for replicating setup (repset.exe) and copy it onto the configuration diskette or USB flash media device. To obtain this utility, go to http://www.hp.com

, click

Software and Driver Downloads

, and enter the model number of the computer.

9. On the configuration diskette or USB flash media device, create an autoexec.bat file containing the following command: repset.exe

10. Turn off the computer to be configured. Insert the configuration diskette or USB flash media device and turn the computer on. The configuration utility will run automatically.

11. Restart the computer when the configuration is complete.



Creating a Bootable Device

Supported USB Flash Media Device

Supported devices have a preinstalled image to simplify the process of making them bootable.

All HP or Compaq and most other USB flash media devices have this preinstalled image. If the

USB flash media device being used does not have this image, use the procedure later in this section (see “Unsupported USB Flash Media Device” ).

To create a bootable USB flash media device, you must have:

■

■

A supported USB flash media device.

A bootable DOS diskette with the FDISK and SYS programs. (If SYS is not available,

FORMAT may be used, but all existing files on the USB flash media device will be lost.)

■ A PC that is bootable from a USB flash media device.

Ä CAUTION: Some older PCs may not be bootable from a USB flash media device. If the default boot order in the Computer Setup (F10) Utility lists the USB device before the hard drive, the computer can be booted from a USB flash media device. Otherwise, a bootable diskette must be used.

1. Turn off the computer.

2. Insert the USB flash media device into one of the computer’s USB ports and remove all other

USB storage devices except USB diskette drives.

3. Insert a bootable DOS diskette with FDISK.COM and either SYS.COM or FORMAT.COM into a diskette drive and turn on the computer to boot to the DOS diskette.

4. Run FDISK from the A:\ prompt by typing

FDISK

and pressing Enter. If prompted, click Yes

(Y) to enable large disk support.

5. Enter Choice [

5

] to display the drives in the system. The USB flash media device will be the drive that closely matches the size of one of the drives listed. It will usually be the last drive in the list. Note the letter of the drive.

USB flash media device drive: __________

Ä CAUTION: If a drive does not match the USB flash media device, do not proceed. Data loss can occur.

Check all USB ports for additional storage devices. If any are found, remove them, reboot the computer, and proceed from step 4. If none are found, either the system does not support the USB flash media device or the USB flash media device is defective. DO NOT proceed in attempting to make the USB flash media device bootable.

6. Exit FDISK by pressing the

Esc

key to return to the A:\ prompt.

7. If your bootable DOS diskette contains SYS.COM, go to step 8. Otherwise, go to step 9.

8. At the A:\ prompt, enter

SYS x:

where x represents the drive letter noted above.

Ä CAUTION: Be sure that you have entered the correct drive letter for the USB flash media device.

After the system files have been transferred, SYS will return to the A:\ prompt. Go to step 13.

9. Copy any files you want to keep from your USB flash media device to a temporary directory on another drive (for example, the system's internal hard drive).



10. At the A:\ prompt, enter

FORMAT /S X:

where X represents the drive letter noted before.

Ä CAUTION: Be sure that you have entered the correct drive letter for the USB flash media device.

FORMAT will display one or more warnings and ask you each time whether you want to proceed. Enter

Y

each time. FORMAT will format the USB flash media device, add the system files, and ask for a Volume Label.

11. Press

Enter

for no label or enter one if desired.

12. Copy any files you saved in step 9 back to your USB flash media device.

13. Remove the diskette and reboot the computer. The computer will boot to the USB flash media device as drive C.

✎

The default boot order varies from computer to computer, and it can be changed in the Computer

Setup (F10) Utility.

If you have used a DOS version from Windows 9x, you may see a brief Windows logo screen. If you do not want this screen, add a zero-length file named LOGO.SYS to the root directory of the

USB flash media device.

Return to “Copying to Multiple Computers.”

Unsupported USB Flash Media Device

To create a bootable USB flash media device, you must have:

■

■


Bootable DOS diskette with the FDISK and SYS programs. (If SYS is not available,

FORMAT may be used, but all existing files on the USB flash media device will be lost.)

■ PC that is bootable from a USB flash media device.

Ä CAUTION: Some older PCs may not be bootable from a USB flash media device. If the default boot order in the Computer Setup (F10) Utility lists the USB device before the hard drive, the computer can be booted from a USB flash media device. Otherwise, a bootable diskette must be used.

1. If there are any PCI cards in the system that have SCSI, ATA RAID, or SATA drives attached, turn off the computer and unplug the power cord.

Ä CAUTION: The power cord MUST be unplugged.

2. Open the computer and remove the PCI cards.

3. Insert the USB flash media device into one of the computer's USB ports and remove all other

USB storage devices except USB diskette drives. Close the computer cover.

4. Plug in the power cord and turn on the computer.


F10



Enter


✎

If you do not press

F10


F10




6. Go to Advanced > PCI Devices to disable both the PATA and SATA controllers. When disabling the SATA controller, note the IRQ to which the controller is assigned. You will need to reassign the IRQ later. Exit setup, confirming the changes.

SATA IRQ: __________

7. Insert a bootable DOS diskette with FDISK.COM and either SYS.COM or FORMAT.COM into a diskette drive and turn on the computer to boot to the DOS diskette.

8. Run FDISK and delete any existing partitions on the USB flash media device. Create a new partition and mark it active. Exit FDISK by pressing the

Esc

key.

9. If the system did not automatically restart when exiting FDISK, press

Ctrl

+

Alt

+

Del

to reboot to the DOS diskette.

10. At the A:\ prompt, type

FORMAT C: /S

and press

Enter

. Format will format the USB flash media device, add the system files, and ask for a Volume Label.

11. Press

Enter

for no label or enter one if desired.

12. Turn off the computer and unplug the power cord. Open the computer and re-install any PCI cards that were previously removed. Close the computer cover.

13. Plug in the power cord, remove the diskette, and turn on the computer.


F10



Enter


15. Go to Advanced > PCI Devices and re-enable the PATA and SATA controllers that were disabled in step 6. Put the SATA controller on its original IRQ.

16. Save the changes and exit. The computer will boot to the USB flash media device as drive C.

✎

The default boot order varies from computer to computer, and it can be changed in the Computer

Setup (F10) Utility. Refer to the Computer Setup (F10) Utility Guide on the Documentation and

Diagnostics CD for instructions.

If you have used a DOS version from Windows 9x, you may see a brief Windows logo screen. If you do not want this screen, add a zero-length file named LOGO.SYS to the root directory of the


Return to “Copying to Multiple Computers.”

3.4.5 Dual-State Power Button

With Advanced Configuration and Power Interface (ACPI) enabled, the power button can function either as an on/off switch or as a standby button. The stand-by feature does not completely turn off power, but instead causes the computer to enter a low-power standby state.

This allows you to power down quickly without closing applications and to return quickly to the same operational state without any data loss.

To change the power button’s configuration, complete the following steps:

1. Left click on the Start Button, then select Control Panel > Power Options.

2. In the Power Options Properties, select the Advanced tab.

3. In the Power Button section, select Stand by.



After configuring the power button to function as a standby button, press the power button to put the system in a very low power state (standby). Press the button again to quickly bring the system out of standby to full power status. To completely turn off all power to the system, press and hold the power button for four seconds.

Ä CAUTION: Do not use the power button to turn off the computer unless the system is not responding; turning off the power without operating system interaction could cause damage to or loss of data on the hard drive.

3.4.6 HP Web Site Support

When making the transition to new or revised operating systems, it is important to implement the support software designed for that operating system. If you plan to run a version of Microsoft

Windows that is different from the version included with the computer, you must install corresponding device drivers and utilities to ensure that all features are supported and functioning properly.

HP has made the task of locating, accessing, evaluating, and installing the latest support software easier. You can download the software from http://www.hp.com/support

.

The Web site contains the latest device drivers, utilities, and flashable ROM images needed to run the latest Microsoft Windows operating system on the HP computer.

3.4.7 Industry Standards

HP management solutions integrate with other systems management applications, and are based on industry standards, such as:

■

■

■

■

■

■

Web-Based Enterprise Management (WBEM)

Windows Management Interface (WMI)

Wake on LAN Technology

ACPI

SMBIOS

Pre-boot Execution (PXE) support

3.5 Asset Tracking and Security

Asset tracking features incorporated into the computer provide key asset tracking data that can be managed using HP Systems Insight Manager, HP Client Manager or other system management applications. Seamless, automatic integration between asset tracking features and these products enables you to choose the management tool that is best suited to the environment and to leverage the investment in existing tools.

HP also offers several solutions for controlling access to valuable components and information.

HP Embedded Security for ProtectTools, if installed, prevents unauthorized access to data and checks system integrity and authenticates third-party users attempting system access. (For more information, refer to the HP ProtectTools Security Manager Guide at www.hp.com

.) Security features such as HP Embedded Security for ProtectTools, the Smart Cover Sensor and the Smart

Cover Lock, available on some models, help to prevent unauthorized access to the internal components of the personal computer. By disabling parallel, serial, or USB ports, or by disabling


Desktop Management removable media boot capability, you can protect valuable data assets. Memory Change and

Smart Cover Sensor alerts can be automatically forwarded to system management applications to deliver proactive notification of tampering with a computer’s internal components.

✎

HP Embedded Security for ProtectTools, the Smart Cover Sensor, and the Smart Cover Lock are available as options on some systems.

Use the following utilities to manage security settings on the HP computer:

■ Locally, using the Computer Setup Utilities. See the Computer Setup (F10) Utility Guide on the Documentation and Diagnostics CD included with the computer for additional information and instructions on using the Computer Setup Utilities. Some computers also have HP BIOS Configuration for ProtectTools, which is a Windows-based component of

ProtectTools that allows administrators to configure BIOS security settings from within the running OS.

■ Remotely, using HP Client Manager Software or System Software Manager. This software enables the secure, consistent deployment and control of security settings from a simple command-line utility.

The following table and sections refer to managing security features of the computer locally through the Computer Setup (F10) Utilities.

Security Features Overview

Option

Setup Password

Description

Allows you to set and enable setup (administrator) password.

✎ If the setup password is set, it is required to change

Computer Setup options, flash the ROM, and make changes to certain plug and play settings under Windows.

Power-On Password

Password Options

(This selection will appear only if a power-on password is set.)

Pre-Boot Authorization

Allows you to set and enable power-on password.

Allows you to specify whether the password is required for warm boot (CTRL+ALT+DEL) (appears if a power-on password is set).

Smart Cover

Allows you to enable/disable the Smart Card to be used in place of the Power-On Password.

Allows you to:

• Enable/disable the Cover Lock.

• Enable/disable the Cover Removal Sensor.

✎ Notify User alerts the user that the sensor has detected that the cover has been removed. Setup Password requires that the setup password be entered to boot the computer if the sensor detects that the cover has been removed.

This feature is supported on some models only and will only appear if a Smart Card reader is attached to the system.

Embedded Security Allows you to:

• Enable/disable the Embedded Security device.

• Reset the device to Factory Settings.

✎ For more information about Computer Setup, see the Computer Setup (F10) Utility Guide.

Support for security features may vary depending on your specific computer configuration.



Security Features Overview (Continued)

Option

Device Security

Network Service Boot

System IDs

Description

Enables/disables serial ports, parallel port, front USB ports, system audio, network controllers (some models), and SCSI controllers (some models).

Enables/disables the computer’s ability to boot from an operating system installed on a network server. (Feature available on NIC models only; the network controller must reside on the PCI bus or be embedded on the system board.)

Allows you to set:

• Asset tag (18-byte identifier) and ownership Tag (80-byte identifier displayed during POST).

• Chassis serial number or Universal Unique Identifier

(UUID) number. The UUID can only be updated if the current chassis serial number is invalid. (These ID numbers are normally set in the factory and are used to uniquely identify the system.)

• Keyboard locale setting (for example, English or German) for System ID entry.

DriveLock (some models) Allows you to assign or modify a master or user password for certain ATA hard drives. When this feature is enabled, the user is prompted to provide one of the DriveLock passwords during

POST. If neither is successfully entered, the hard drive will remain inaccessible until one of the passwords is successfully provided during a subsequent cold-boot sequence.

✎ This selection will only appear when at least one drive that supports ATA Security is attached to the system.

✎ For more information about Computer Setup, see the Computer Setup (F10) Utility Guide.

Support for security features may vary depending on your specific computer configuration.



Mechanical Security Features

Feature

Memory Change Alerts

Cable Lock Provision

Security Loop Provision

Purpose

Detects when memory modules have been added, moved, or removed; notifies user and system administrator.

Inhibits access to the interior of the computer to prevent unwanted configuration changes or component removal. Can also be used to secure the computer to a fixed object to prevent theft.

Inhibits access to the interior of the computer to prevent unwanted configuration changes or component removal.

How It Is Established

This feature is automatic.

Install a cable lock to secure the computer to a fixed object.

Install a lock in the security loop to prevent unwanted configuration changes or component removal.

3.5.1 Password Security

The power-on password prevents unauthorized use of the computer by requiring entry of a password to access applications or data each time the computer is turned on or restarted. The setup password specifically prevents unauthorized access to Computer Setup, and can also be used as an override to the power-on password. That is, when prompted for the power-on password, entering the setup password instead will allow access to the computer.

A network-wide setup password can be established to enable the system administrator to log in to all network systems to perform maintenance without having to know the power-on password, even if one has been established.

3.5.2 Establishing a Setup Password Using Computer Setup

If the system is equipped with an embedded security device, refer to the HP ProtectTools

Security Manager Guide at www.hp.com

. Establishing a setup password through Computer

Setup prevents reconfigration of the computer (use of the Computer Setup (F10) utility) until the password is entered.

1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart.


F10



Enter


✎

If you do not press

F10


F10


3. Select Security, then select Setup Password and follow the instructions on the screen.

4. Before exiting, Select File > Save Changes and Exit.



3.5.3 Establishing a Power-On Password Using Computer Setup

Establishing a power-on password through Computer Setup prevents access to the computer when power is turned on, unless the password is entered. When a power-on password is set,

Computer Setup presents Password Options under the Security menu. Password options include

Password Prompt on Warm Boot. When Password Prompt on Warm Boot is enabled, the password must also be entered each time the computer is rebooted.



F10



Enter


✎

If you do not press

F10


F10


3. Select Security, then Power-On Password and follow the instructions on the screen.

4. Before exiting, select File > Save Changes and Exit.

Entering a Power-On Password

To enter a power-on password, complete the following steps:


2. When the key icon appears on the monitor, type the current password, then press

Enter.

✎

Type carefully; for security reasons, the characters you type do not appear on the screen.

If you enter the password incorrectly, a broken key icon appears. Try again. After three unsuccessful tries, you must turn off the computer, then turn it on again before you can continue.

Entering a Setup Password



.

If a setup password has been established on the computer, you will be prompted to enter it each time you run Computer Setup.



F10



Enter


✎

If you do not press

F10


F10


3. When the key icon appears on the monitor, type the setup password, then press

Enter

.

✎


If you enter the password incorrectly, a broken key icon appears. Try again. After three unsuccessful tries, you must turn off the computer, then turn it on again before you can continue.



Changing a Power-On or Setup Password



.


2. To change the Power-On password, go to step 3.

To change the Setup password, as soon as the computer is turned on, press

F10

when the monitor light turns green to enter Computer Setup. Press

Enter


✎

If you do not press

F10


F10


3. When the key icon appears, type the current password, a slash (/) or alternate delimiter character, the new password, another slash (/) or alternate delimiter character, and the new password again as shown: current password/new password/new password

✎


4. Press

Enter

.

The new password takes effect the next time you turn on the computer.

✎

Refer to “National Keyboard Delimiter Characters” for information about the alternate delimiter characters. The power-on password and setup password may also be changed using the Security options in Computer Setup.

Deleting a Power-On or Setup Password



.

1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart.

2. To delete the Power-On password, go to step 3.

To delete the Setup password, as soon as the computer is turned on, press

F10

when the monitor light turns green to enter Computer Setup. Press

Enter


✎

If you do not press

F10


F10


3. When the key icon appears, type the current password followed by a slash (/) or alternate delimiter character as shown: current password/

4. Press

Enter

.

✎

Refer to the National Keyboard Delimiter Character table below for information about the alternate delimiter characters. The power-on password and setup password may also be changed using the Security options in Computer Setup.



National Keyboard Delimiter Characters

Each keyboard is designed to meet country-specific requirements. The syntax and keys that you use for changing or deleting your password depend on the keyboard that came with your computer.

National Keyboard Delimiter Characters

Arabic

Belgian

BHCSY*

Brazilian

-

/

/

=

Greek

Hebrew

Hungarian

Italian -

-

.

Russian

Slovakian

Spanish

Swedish/Finnish

Chinese

Czech

Danish

French

-

-

!

/ Japanese

Korean

Latin American

Norwegian

-

-

/

/

Swiss

Taiwanese

Thai

Turkish

U.S. English French Canadian

German -

é Polish

Portuguese

-

-

* For Bosnia-Herzegovina, Croatia, Slovenia, and Yugoslavia

.

/

-

/

/

-

/

-

/

Clearing Passwords

If you forget the password, you cannot access the computer. Refer to the Troubleshooting Guide on the Documentation and Diagnostics CD for instructions on clearing passwords.

If the system is equiped with an embedded security device, refer to the HP ProtectTools Security

Manager Guide at www.hp.com

.

3.5.4 DriveLock

DriveLock is an industry-standard security feature that prevents unauthorized access to the data on ATA hard drives. DriveLock has been implemented as an extension to Computer Setup. It is only available when hard drives that support the ATA Security command set are detected.

DriveLock is intended for HP customers for whom data security is the paramount concern. For such customers, the cost of the hard drive and the loss of the data stored on it is inconsequential when compared with the damage that could result from unauthorized access to its contents. In order to balance this level of security with the practical need to accommodate a forgotten password, the HP implementation of DriveLock employs a two-password security scheme. One password is intended to be set and used by a system administrator while the other is typically set and used by the end-user. There is no “back-door” that can be used to unlock the drive if both passwords are lost. Therefore, DriveLock is most safely used when the data contained on the hard drive is replicated on a corporate information system or is regularly backed up.

In the event that both DriveLock passwords are lost, the hard drive is rendered unusable. For users who do not fit the previously defined customer profile, this may be an unacceptable risk.

For users who do fit the customer profile, it may be a tolerable risk given the nature of the data stored on the hard drive.



Using DriveLock

When one or more hard drives that support the ATA Security command set are detected, the

DriveLock option appears under the Security menu in Computer Setup. The user is presented with options to set the master password or to enable DriveLock. A user password must be provided in order to enable DriveLock. Since the initial configuration of DriveLock is typically performed by a system administrator, a master password should be set first. HP encourages system administrators to set a master password whether they plan to enable DriveLock or keep it disabled. This will give the administrator the ability to modify DriveLock settings if the drive is locked in the future. Once the master password is set, the system administrator may enable

DriveLock or choose to keep it disabled.

If a locked hard drive is present, POST will require a password to unlock the device. If a power-on password is set and it matches the device’s user password, POST will not prompt the user to re-enter the password. Otherwise, the user will be prompted to enter a DriveLock password. On a cold boot, either the master or the user password may be used. On a warm boot, enter the same password used to unlock the drive during the preceding cold-boot. Users will have two attempts to enter a correct password. On a cold boot, if neither attempt succeeds, POST will continue but the drive will remain inaccessible. On a warm boot or restart from Windows, if neither attempt succeeds, POST will halt and the user will be instructed to cycle power.

DriveLock Applications

The most practical use of the DriveLock security feature is in a corporate environment. The system administrator would be responsible for configuring the hard drive which would involve, among other things, setting the DriveLock master password and a temporary user password. In the event that the user forgets the user password or the equipment is passed on to another employee, the master password can always be used to reset the user password and regain access to the hard drive.

HP recommends that corporate system administrators who choose to enable DriveLock also establish a corporate policy for setting and maintaining master passwords. This should be done to prevent a situation where an employee intentionally or unintentionally sets both DriveLock passwords before leaving the company. In such a scenario, the hard drive would be rendered unusable and require replacement. Likewise, by not setting a master password, system administrators may find themselves locked out of a hard drive and unable to perform routine checks for unauthorized software, other asset control functions, and support.

For users with less stringent security requirements, HP does not recommend enabling DriveLock.

Users in this category include personal users or users who do not maintain sensitive data on their hard drives as a common practice. For these users, the potential loss of a hard drive resulting from forgetting both passwords is much greater than the value of the data DriveLock has been designed to protect. Access to Computer Setup and DriveLock can be restricted through the

Setup password. By specifying a Setup password and not giving it to end users, system administrators are able to restrict users from enabling DriveLock.



3.5.5 Smart Cover Sensor

Cover Removal Sensor, available on some models, is a combination of hardware and software technology that can alert you when the computer cover or side panel has been removed. There are three levels of protection, as described in the following table.

Smart Cover Sensor Protection Levels

Level

Level 0

Setting

Disabled

Description

Smart Cover Sensor is disabled (default).

Level 1

Level 2

✎

Notify User

Setup Password

When the computer is restarted, the screen displays a message indicating that the computer cover or side panel has been removed.

When the computer is restarted, the screen displays a message indicating that the computer cover or side panel has been removed. You must enter the setup password to continue.

These settings can be changed using Computer Setup. For more information about Computer

Setup, see the Computer Setup (F10) Utility Guide.

Setting the Smart Cover Sensor Protection Level

To set the Smart Cover Sensor protection level, complete the following steps:



F10



Enter


✎

If you do not press

F10


F10


3. Select Security > Smart Cover > Cover Removal Sensor, and select the desired security level.

4. Before exiting, select File > Save Changes and Exit.

Smart Cover Lock

The Smart Cover Lock is a software-controllable cover lock featured on some HP computers.

This lock prevents unauthorized access to the internal components. Computers ship with the

Smart Cover Lock in the unlocked position.

Ä CAUTION: For maximum cover lock security, be sure to establish a setup password. The setup password prevents unauthorized access to the Computer Setup utility.

✎

The Smart Cover Lock is available as an option on some systems.



Locking the Smart Cover Lock

To activate and lock the Smart Cover Lock, complete the following steps:



F10



Enter


✎

If you do not press

F10


F10


3. Select Security > Smart Cover > Cover Lock > Lock option.


Unlocking the Smart Cover Lock



F10



Enter


✎

If you do not press

F10


F10


3. Select Security > Smart Cover > Cover Lock > Unlock.


Using the Smart Cover FailSafe Key

■

■

■

■

If you enable the Smart Cover Lock and cannot enter your password to disable the lock, you will need a Smart Cover FailSafe Key to open the computer cover. You will need the key in any of the following circumstances:

Power outage

Startup failure

PC component failure (such as processor or power supply)

Forgotten password

Ä CAUTION: The Smart Cover FailSafe Key is a specialized tool available from HP. Be prepared; order this key before you need one (Tamper-resistant wrench PN 166527-001 or tamper-resistant bits PN

166527-002).

For more information about using the Smart Cover FailSafe Key, please see the Removal and

Replacement chapter for the specific chassis.

3.5.6 Cable Lock Provision

The rear panel of the computer accommodates a cable lock so that the computer can be physically secured to a work area. For illustrated instructions, please see the Removal and

Replacement chapter for the specific chassis.



3.5.7 Fingerprint Identification Technology

Eliminating the need to enter user passwords, HP Fingerprint Identification Technology tightens network security, simplifies the login process, and reduces the costs associated with managing corporate networks. Affordably priced, it is not just for high-tech, high-security organizations anymore.

✎

Support for Fingerprint Identification Technology varies by model.

For more information, visit http://h18004.www1.hp.com/products/security/

.

3.6 Fault Notification and Recovery

Fault Notification and Recovery features combine innovative hardware and software technology to prevent the loss of critical data and minimize unplanned downtime.

If the computer is connected to a network managed by HP Client Manager, the computer sends a fault notice to the network management application. With HP Client Manager, you can also remotely schedule diagnostics to automatically run on all managed PCs and create a summary report of failed tests.

3.6.1 Drive Protection System

The Drive Protection System (DPS) is a diagnostic tool built into the hard drives installed in some HP computers. DPS is designed to help diagnose problems that might result in unwarranted hard drive replacement.

When HP computers are built, each installed hard drive is tested using DPS, and a permanent record of key information is written onto the drive. Each time DPS is run, test results are written to the hard drive. Your service provider can use this information to help diagnose conditions that caused you to run the DPS software. Refer to the Troubleshooting Guide for instructions on using

DPS.

3.6.2 Surge-Tolerant Power Supply

An integrated surge-tolerant power supply provides greater reliability when the computer is hit with an unpredictable power surge. This power supply is rated to withstand a power surge of up to 2000 volts without incurring any system downtime or data loss.

3.6.3 Thermal Sensor

The thermal sensor is a hardware and software feature that tracks the internal temperature of the computer. This feature displays a warning message when the normal range is exceeded, which gives you time to take action before internal components are damaged or data is lost.




Desktop Management. HP Compaq dc5750 SFF, Compaq dc5750 Small Form Factor PC, dc5750, Compaq dc5750 Microtower PC

Desktop Management

3.1 Initial Configuration and Deployment

3.1.1 HP OpenView Agent

3.1.2 Altiris Deployment Solution Agent

3.1.3 HP Backup and Recovery Manager

3.2 Remote System Installation

3.3 Software Updating and Management

3.3.1 HP Client Management Interface

3.3.2 HP System Software Manager

3.3.3 HP Client Manager

3.3.4 HP ProtectTools Security Manager

3.3.5 HP Client Premium Suite

3.3.6 HP Client Foundation Suite

3.3.7 HP OpenView Client Configuration Manager

3.3.8 HP OpenView PC Configuration Management Solutions

3.3.9 Proactive Change Notification

3.3.10 Subscriber’s Choice

3.3.11 Retired Solutions

3.4.1 Remote ROM Flash

3.4.2 HPQFlash

3.4.3 Boot Block Emergency Recovery Mode

3.4.4 Replicating the Setup

Copying to Single Computer

Copying to Multiple Computers

Creating a Bootable Device

3.4.5 Dual-State Power Button

3.4.6 HP Web Site Support

3.4.7 Industry Standards

3.5 Asset Tracking and Security

3.5.1 Password Security

3.5.2 Establishing a Setup Password Using Computer Setup

3.5.3 Establishing a Power-On Password Using Computer Setup

Entering a Power-On Password

Entering a Setup Password

Changing a Power-On or Setup Password

Deleting a Power-On or Setup Password

National Keyboard Delimiter Characters

Clearing Passwords

3.5.4 DriveLock

Using DriveLock

DriveLock Applications

3.5.5 Smart Cover Sensor

Setting the Smart Cover Sensor Protection Level

Smart Cover Lock

Locking the Smart Cover Lock

Unlocking the Smart Cover Lock

Using the Smart Cover FailSafe Key

3.5.6 Cable Lock Provision

3.5.7 Fingerprint Identification Technology

3.6 Fault Notification and Recovery

3.6.1 Drive Protection System

3.6.2 Surge-Tolerant Power Supply

3.6.3 Thermal Sensor

Related manuals

HP

Compaq 6000 Pro SFF

HP

Compaq 8200 Elite All-in-One PC

HP

C6Z78UT#ABA

HP

D8C84UT#ABA

Compaq

4000S

HP

Compaq Elite 8000f USDT

HP

Pro 1005 All-in-One PC

HP

E3S36UT#ABA

HP

Compaq 6000 Pro All-in-One PC

HP

Rp3000 - Point of Sale System

Compaq

dx1000 - Microtower PC

Table of contents