HP 2230s - Compaq Business Notebook Installation guide

2008 HP Business
Notebook PC F10 Setup
Overview
Table of Contents:
Background ........................................................................................................2
Supported Models.....................................................................................2
EFI BIOS Features...................................................................................... 3
F10 Setup ................................................................................................3
BIOS Users/Passwords, and One Step Log-On ...................................................10
Password Setup (with/with-out HP ProtectTools) .................................................11
HP Client Management Interface ........................................................................11
Anomalies.........................................................................................................13
Q & A...............................................................................................................14
Resources .........................................................................................................16

Background
HP provides customers unique value through HP--developed BIOS. HP BIOS
enables customers to experience innovations such as HP ProtectTools, HP
Wireless Assistant, and HP QuickLook. The enhanced security and functionality
of these applications is possible only through tight integration with BIOS that
HP provides.
HP BIOS contains a number of features that are configurable and manageable
by customers. Options for these features are accessed through F10 Setup, the
BIOS configuration user interface provided with HP PCs.
Since 1999 HP Compaq business notebooks have utilized a text based F10
Setup which provided customers with access to a broad set of functions and
configuration options, but required keyboard navigation. In 2008, a new F10
Setup user interface was developed using the Extensible Firmware Interface
(EFI) framework, which provides a flexible pre operating system environment
and navigation using a mouse or other pointing device. While there are
significant improvements to the user interface, features and functionality are not
impacted by this change.
This document describes the features and functionality of HP’s BIOS
environment for 2008 business notebook and tablet models.
Supported Models
All 2008 s, b, p and w business notebook and tablet models:
•HP EliteBook 8730w
•HP EliteBook 8530w
•HP EliteBook 8530p
•HP EliteBook 6930p
•HP Compaq 6830s
•HP Compaq 6735b
•HP Compaq 6735s
•HP Compaq 6730b
•HP Compaq 6730s
•HP Compaq 6535b
•HP Compaq 6535s
•HP Compaq 6531s
•HP Compaq 6530b
•HP Compaq 6530s
•HP EliteBook 2730p
•HP EliteBook 2530p
•HP Compaq 2230s

EFI BIOS Features
•SD boot capability
oNew HP business notebook models are now capable of booting
off of Secure Digital cards inserted in the internal reader
•Change/View/Hide BIOS settings
oAdministrators can select the access to F10 Setup options for
standard user
•Multi-User support
oEnhanced support with ProtectTools
•Password policy support
•RAID and Native SATA support
•Enhanced wireless button control
•Wake on LAN
•Ability to disable modem/camera
F10 Setup
HP F10 Setup provides access to the impressive set of features support by HPs ROM BIOS
(Read Only Memory Basic Input/Output System). The BIOS is the set of routines that enable
a computer to load the operating system and communicate with the various devices, such as
storage drives, keyboard, display, slots, and ports.
HP F10 Setup features are separated in several groups or categories:
File – Provides access to general options such as view system information, set date and
time, exit F10 Setup with and without saving changes to settings.
Security – Provides access to security related options such as power on and DriveLock
passwords, integrated security device configuration, Disk Sanitizer and asset tag
configuration.
Diagnostics – Provides access to diagnostic features, such as start-up test, run-in test and a
hard disk test.
System Configuration – Provides access to boot options, integrated device configuration,
port options, AMT options (on select models), and F10 Setup feature access options.
HP F10 Setup for business notebooks had extensive language support. The new graphical
user interface can be displayed in English, French, German, Spanish, Italian, Dutch, Danish,
Japanese, Norwegian, Portuguese, Swedish or Finnish. Switching languages is simple using
the Language selection options available from the System Configuration page.
For a detail list of F10 Setup options, please refer to Table 1.

Table 1. Key features for F10 Setup on select 2008 HP business notebook PCs
Feature Function Options (Default in Bold where
applicable)
FILE MENU
System Information Provides key system information,
such as serial number, model
number, CPU type, and memory
configuration.
N/A
Set System Date and Time Allows configuration of the date and
time.
Set Date (MM/DD/YYYY)
Set Time (HH:MM)
Restore Defaults Restores F10 settings to factory
defaults.
N/A
Ignore Changes and Exit Exit F10 Setup without saving any
changes made during the current
session.
Yes, No or Cancel
Save Changes and Exit Exit F10 Setup and save all changes
made during the current session.
Yes, No or Cancel
SECURITY MENU
Administrator Tools
Setup BIOS Administrator
Password
Establish an power on password with
Administrator privileges
N/A
Create New BIOS User
Account
Creates additional BIOS user
accounts.
Administrator enters User ID
Privilege level. Password is set to
User ID by default, but can be
changed by user.
Password Policy
Password Minimum Length Allows administrator to specify the
minimum number of characters
required for an F10 power on
password.
4 minimum
32 maximum
At least one symbol required Allows administrator to require at
least one symbol, such as $, %, ^, &
or # for an F10 power on password.
Yes/No
At least one number
required
Allows administrator to require at
least one number, such as 1, 2, 3 or
4 for an F10 power on password.
Yes/No

Table 1. (Continued) Key features for F10 Setup on select 2008 HP business notebook PCs
Feature Function Options (Default in Bold where
applicable)
SECURITY MENU
Password Policy (Cont.)
At least one upper case
character required
Allows administrator to require at
least one upper case character, such
as A, B, C or D for an F10 power on
password.
Yes/No
At least one lower case
character required
Allows administrator to require at
least one upper case character, such
as a, b, c or d for an F10 power on
password.
Yes/No
Are spaces allowed in
Password?
Allows administrator to allow spaces
in an F10 power on password, such
as “New York”.
Yes/No
HP SpareKey Allows users to establish a set of
failsafe questions in the event that
the power on password is lost or
forgotten.
Enabled/Disabled
Always Prompt for HP
SpareKey Enrollment
Allows administrator to specify if the
system should prompt users for HP
SpareKey enrollment during POST.
Enabled/Disabled
Fingerprint Reset on Reboot
(If Present)
Enabled/Disabled
User Tools
Change Password Change power on password N/A
HP SpareKey Enrollment Allows for user configuration of HP
SpareKey.
Answer any three of ten questions
for enrollment.
DriveLock Password Allows for configuration of DriveLock
Master and User passwords.
Notebook Hard Drive
Cancel
Automatic DriveLock Notebook Hard Drive
Cancel

Table 1. (Continued) Key features for F10 Setup on select 2008 HP business notebook PCs
Feature Function Options (Default in Bold where
applicable)
SECURITY MENU
TPM Embedded Security
Embedded Security Device
Availability
Exposes the integrated TPM module. Available/Hidden
Embedded Security Device
State
Enables the integrated TPM module. Enabled/Disabled
Factory Defaults Set TPM Embedded Security settings
to factory default
Yes/No
Power-On Authentication
Support
Enables multi-factor authentication at
power on.
Enabled/Disabled
Reset Authentication
Credential
Resets credentials. Yes/No
OS Management of TPM Allow the operating system to
manage TPM module.
Enabled/Disabled
Reset of TPM from OS Allows reset of TPM module from
within the operating system.
Enabled/Disabled
Utilities
HP Disk Sanitizer Performs erasure of all data on
selected hard drive
Notebook Hard Drive
Cancel
System IDs:
Notebook Asset Tag Allows for custom configuration of
an asset tag.
Serial Number
Notebook Ownership Tag 1 Allows for custom configuration of
an ownership tag.
Blank
Notebook Ownership Tag 2 Allows for custom configuration of
an ownership tag.
Blank
DIAGNOSTICS
System Information Provides system information, such as
serial number, model number, CPU
type, and memory configuration.
F1
Escape to Cancel
Start-Up Test Performs diagnostics check on
memory and hard disk.
F2
Escape to Cancel
Run-In Test Performs a continuous diagnostics
check on memory and hard disk.
F3
Escape to Cancel
Hard Disk Test Performs hard drive diagnostics
check.
F4
Escape to Cancel


Table 1. (Continued) Key features for F10 Setup on select 2008 HP business notebook PCs
Feature Function Options (Default in Bold where
applicable)
SYSTEM CONFIGURATION MENU
Boot Options
Startup Menu Delay (Sec.) Amount of time the Startup Menu will
be displayed during POST.
0-35 seconds in increments of
5
Custom Logo Enables the use of a custom logo
screen during POST.
Enabled/Disabled
Display Diagnostics URL Display web address for diagnostics.
Enabled/Disabled
CD-ROM boot Allows for boot from optical media. Enabled/Disabled
SD Card boot Allows for boot from SD Card. Enabled/Disabled
Floppy boot Allows for boot from USB floppy. Enabled/Disabled
PXE Internal NIC boot Allows for boot from LAN. Enabled/Disabled
Multiboot:
Express Boot Popup Delay
(Sec)
Amount of time the Express Boot
option will be displayed.
0-35 seconds in increments of
5
Boot Order Specify the boot order. NB Upgrade Bay, NB Hard
Drive, USB Floppy, USB CD-
ROM, USB Hard Drive, NB
Ethernet, SD Card, Dock Upgrade
Bay, Ext SATA Drive
Device Configurations
USB Legacy Support Enables mouse/keyboard support. Enabled/Disabled
Parallel port mode Specifies parallel port mode. ECP, standard, bidirectional, EPP
Fan Always on while on AC Leave fan on while on AC. Enabled/Disabled
LAN Power Save LAN power save option Enabled/Disabled
Data Execution Prevention Enables DEP on Intel based systems. Enabled/Disabled
SATA Device Mode Select SATA mode AHCI/IDE

Table 1. (Continued)KeyfeaturesforF10Setuponselect2008HPbusinessnotebookPCs
Feature Function Options (Default in Bold where
applicable)
SYSTEM CONFIGURATION MENU
Device Configurations
(Cont.)
Secondary Battery Fast
Charge
Switches charging to secondary
battery when primary battery is 90%
charged to optimize charge cycle.
Enabled/Disabled
HP QuickLook Info button access to HP QuickLook.
Enabled/Disabled
UEFI Boot Mode Enables UEFI boot mode Enabled/Disabled
Virtualization Technology Enables VT on Intel based systems. Enabled/Disabled
TXT Technology Enables TXT on Intel based systems. Enabled/Disabled
Dual Core CPU Enables dual processor cores. Enabled/Disabled
Built-In Device Options
Wireless Button State Enables wireless button Enabled/Disabled
Embedded WLAN Device Enables integrated 802.11 device. Enabled/Disabled
Embedded Bluetooth Device Enables integrated Bluetooth device.
Enabled/Disabled
Network Interface Controller Enables integrated NIC device. Enabled/Disabled
LAN/WLAN Switching Enables automatic switching. Enabled/Disabled
Wake on LAN Enabled the system to wake when a
magic packet is received via LAN.
Disabled/Boot to
Network/Follow Boot order
Notebook Upgrade Bay Enables integrated upgrade bay. Enabled/Disabled
Fingerprint Device Enables fingerprint reader. Enabled/Disabled
Integrated Camera Enables integrated camera. Enabled/Disabled
Modem Device Enables integrated modem. Enabled/Disabled
Port Options
Serial Port Enables integrated serial port. Enabled/Disabled
Parallel Port Enables integrated parallel port. Enabled/Disabled
Flash media reader Enables integrated SD Card reader. Enabled/Disabled
USB Port Enables integrated USB port. Enabled/Disabled
1394 Port Enables integrated 1394 port. Enabled/Disabled
Express Card Slot Enables integrated express card slot.
Enabled/Disabled
Smart Card Enables integrated smart card slot. Enabled/Disabled

Table 1. (Continued) Key features for F10 Setup on select 2008 HP business notebook PCs
Feature Function Options (Default in Bold where
applicable)
SYSTEM CONFIGURATION MENU
Active Management
Technology (AMT) Options
(Displayed on Intel
notebooks)
Firmware Verbosity Display AMT text during POST. Enabled/Disabled
AMT Setup Prompt Prompts for AMT setup during POST.
Enabled/Disabled
USB Key Provisioning Allow AMT provisioning using USB
disk on key.
Enabled/Disabled
Unconfigure AMT on next
boot
Reset AMT configuration options on
next boot.
Enabled/Disabled
Terminal Emulation Mode Specify terminal emulation mode. ANSI/VT100
Firmware Progress Event
Support
Enabled/Disabled
Include TYPE-131 in
SMBIOS
Enabled/Disabled
Set Security Level Allows administrator to restrict visibility or configurability of F10 Setup
options for standard users

BIOS Users/Passwords, and One Step Log-On
There are currently three types of BIOS users:
BIOS Administrator
BIOS administrator is created in F10 and includes the following privileges:
•Manage other BIOS users
•Full access to F10 BIOS policy and settings
•Control F10 access of other users by setting security level
•Unlock the system when other BIOS users fail the preboot authentication
BIOS User
BIOS users are created by BIOS administrator in F10 and are OS independent.
BIOS user privilege includes:
•Use of BIOS password to authenticate and boot the BIOS
•Use of BIOS password to access F10 based on permission setup by the
BIOS administrator
HP ProtectTools Users
ProtectTools users are created by the HP ProtectTools security solution from within
Windows. Users are registered in Windows and the user information and
communicated to both Full Volume Encryption and BIOS. This group of uses cannot
change their password in F10.
ProtectTools user privilege includes:
•Use his/her Windows password and other security tokens to authenticate
and boot the BIOS and if enabled, can log all the way into Windows.
•Use his/her Windows password to access F10 based on the permission
setup by the BIOS administrator
One-Step Logon
Pre-boot has been enhanced by combining security tokens (such as biometrics,
smart cards and passwords) and enablement of multi-user access. HP business
notebooks offer a range of pre-boot authentication solutions, allowing businesses
to provide an additional layer of protection against unauthorized access, including
attackers attempting to boot the system from a device other than the primary hard
drive.
Enhanced pre-boot security is an integral component of the overall authentication
process; user accounts created in Windows are also automatically made available
in the pre-boot environment. With multi-factor pre-boot authentication, once the
notebook is powered on, the end-user is required to provide a user name, then
authenticate using one or more factors (such as a password, a fingerprint swipe or
smart card). The notebook then logs the user all the way into Windows, a process
known as One-Step Logon.

HP business notebooks support the following authentication factors at boot-up:
•Password
•Fingerprint reader (integrated on most business notebooks)
•Smart card
For more information, visit www.hp.com/products/security
Password Setup (with/with-out HP ProtectTools)
Setting up BIOS preboot authentication without HP ProtectTools
(Power On Password)
Prior to 2008 business notebook platforms utilized the Power On Password to
enable BIOS preboot authentication.
2008 and newer business notebook BIOS support multi-user authentication. In
order to turn on the BIOS preboot authentication, first set the BIOS administrator
password via F10 setup -> Security.
Then login into F10 as the BIOS administrator and add user to BIOS via F10 setup
-> Security -> User Managerment.
The BIOS will now prompt for the BIOS user password during boot.
Setting up BIOS preboot authentication with HP ProtectTools
The other way to turn on BIOS preboot authentication is to use HP ProtectTools
Security Manager. The user will need to go through the HP ProtectTools wizard to
setup as ProtectTools users, register security tokens such as smart card or
fingerprint and enable the preboot domain. The BIOS will then prompt for user to
authenticate themselves by using a Windows password, smart card or fingerprint
during boot.
HP Client Management Interface
With the HP Client Management Interface (HPCMI), HP business computers
seamlessly integrate into your managed IT environment. HP CMI simplifies
integrating HP business computers with popular industry system management
tools (including Microsoft® Systems Management Server, IBM Tivoli Software,
and HP Client Configuration Manager) and custom in-house developed
management applications. Using HP CMI, systems management tools and
applications can request in-depth client inventory, receive health status
information, and manage system BIOS settings by communicating directly with
the client computer, reducing the need for agent or connector software to
achieve integration. HP Client Management Interface is based on industry
standards that include Microsoft Windows® Management Instrumentation
(WMI), System Management BIOS (SMBIOS), and Advanced Configuration
and Power Interface (ACPI). IT administrators can access the HP Client
Management Interface by writing simple scripts and integrating those scripts to
the management solution of their choice.

HP Client Management Interface used in conjunction with system management
software can:
• Request in-depth client inventory information — Capture detailed
information about the processors, hard drives, memory, BIOS, drivers,
including sensor information (such as fan speed, voltage, and temperature)
• Receive health status information — Subscribe for a wide range of
client hardware alerts (such as over-temperature, fan stall, and hardware
configuration changes) to be sent to the system management console,
application, or to the local client computer. Alerts are sent real-time when
triggered by hardware events.
• Manage system BIOS settings — Perform F10 Setup functions including
setting and changing the computer boot order remotely from your system
management console on any or all of your client systems.
HP Client Management Interface provides the following benefits:
Regardless of the system management tools you currently have in place, HP Client
Management Interface expands your flexibility for managing HP business
computers in your IT environment. For more information, visit
www.hp.com/go/easydeploy.

Anomalies
Anomaly: DriveLock passwords cannot be configured remotely.
Systems Affected: All 2008 s, b, p and w business notebook and tablet
models.
Resolution: HP supports DriveLock Master and User password configuration
through F10 Setup, which requires manual configuration. Configuration
through a software utility or manageability console has been considered, but
represents a high risk for our customers, which could result in a denial of
service attack locking users out of the data on their drives.
Anomaly: External mouse does not work while in F10 Setup.
Systems Affected: All 2008 s, b, p and w business notebook and tablet
models.
Resolution: F10 Setup only supports internal pointing devices.
Anomaly: Diagnostics does not work while in F10 Setup.
Systems Affected: All 2008 s, b, p and w business notebook and tablet
models.
Resolution: The HP_TOOLS partition must be present in order for Diagnostics
and QuickLook 2 to function. For instructions on how to create this partition
and functions which require this partition, refer to the HP Business Notebook
Computer EFI Guidelines white paper on HP.com.

Q & A
What is SATA?
SATA refers to Serial ATA, which is a storage interface bus used by desktop and
laptop manufacturers for connecting mass storage devices to the PC’s
motherboard. SATA replaces earlier bus adapter versions of known as ATA and
the Parallel ATA (PATA.)
F10 control of this feature under System Configuration Menu permits the choice of:
•Serial ATA (SATA) Advanced Host Controller Interface (AHCI) mode,
supporting advanced features such as hot-plug and native command queues
•Serial ATA (SATA) Integrated Drive Electronics (IDE) mode, does not support
SATA’s advanced features
Redundant Array of Independent Disks (RAID) technology, which focus on
reliability and performance to maximize fault tolerance is also supported SATA.
What is HP QuickLook?
HP QuickLook is a Personal Information Manager (PIM) viewer for Microsoft
Outlook 2003 and 2007. Captures Microsoft Outlook email, calendar, tasks, and
contact information, and displays it without fully booting into the operating system
and without launching Microsoft Outlook by pressing a single button.
Note: HP QuickLook 2 is accessible when the notebook is off or in hibernation
from Windows XP or Vista. Timings may vary depending on the system
configuration.
What is EFI?
Extensible Firmware Interface (EFI) is a set of modular interfaces that replaces the
set of traditional BIOS interfaces between the operating system and platform
firmware. Online help is available from the QuickLook Preferences page accessed
off the Outlook toolbar.
What is HP SpareKey?
By using HP SpareKey and responding correctly to the pre-selected three personal
questions an individual can quickly recover his Windows password without the
need to contact the IT helpdesk for assistance, thus saving considerable time for
the user and helpdesk expense for the business.
Note: User setup required.
Will the move to a graphical user interface reduce the supported
functions?
No, functionality has improved when compared to our 2007 F10 Setup.
What is contained in the HP_TOOLS partition?
The HP_TOOLS partition contains code for EFI based utilities - F10 Setup,
QuickLook 2 and System Diagnostics. For additional information on EFI and the

HP_TOOLS partition refer to the HP Business Notebook Computer EFI Guidelines
white paper on HP.com.
Can I still access F10 Setup without the HP_TOOLS partition?
Yes, although a basic user interface will be displayed. QuickLook 2 and System
Diagnostics will no longer function.
Will F10 Setup work with a mouse?
No, F10 Setup only supports integrated pointing devices.
Can I use F10 Setup on an external monitor?
Yes.
Is F10 Setup graphical user interface localized?
Yes, the user interface is translated into 12 languages.
Where can I get more information about AMT configuration on HP
Business notebooks?
You can learn more in the Intel Centrino Pro Setup and Configuration for the HP
Compaq Business Notebook PC white paper on HP.com.
Where can I get more information about HP’s EFI applications?
You can learn more in the HP Business Notebook Computer EFI Guidelines white
paper on HP.com.
Can F10 Settings be remotely managed?
F10 Settings can be remotely managed using solutions from HP and Altiris. For
more information, go to www.hp.com/go/easydeploy.
Can the power on password feature be set with or without using HP
ProtectTools?
Yes, however the setting of this feature various somewhat between pre-2008
platforms and later, please reference “Password Setup (with/with-out HP
ProtectTools)” within this document for details.

Resources
HP Support web site – www.hp.com/go/support
HP Client Management Solutions web site – www.hp.com/go/easydeploy
HP Client Management Interface web page – www.hp.com/go/hpcmi
HP System Software Manager web page – www.hp.com/go/ssm
Intel Active Management Technology (AMT) web site -
www.intel.com/technology/platform-technology/intel-amt/
Extensible Firmware Interface (EFI) information -
http://www.hp.com/go/techcenter/startup
HP Business PC Security Solutions website –
www.hp.com/products/security
© 2009 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only
warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.
Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or
omissions contained herein. Itanium is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and
other countries.
April 2009