Desktop Management Guide Business Desktops Document Part Number: 312947-001 March 2003 This guide provides definitions and instructions for using security and Intelligent Manageability features that are preinstalled on select models.
© 2002 Hewlett-Packard Company © 2002 Hewlett-Packard Development Company, L.P. HP, Hewlett Packard, and the Hewlett-Packard logo are trademarks of Hewlett-Packard Company in the U.S. and other countries. Compaq and the Compaq logo are trademarks of Hewlett-Packard Development Company, L.P. in the U.S. and other countries. Microsoft, MS-DOS, Windows, and Windows NT are trademarks of Microsoft Corporation in the U.S. and other countries.
Contents Desktop Management Guide Initial Configuration and Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Remote System Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Software Updating and Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Altiris eXpress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Contents Drive Protection System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Surge-Tolerant Power Supply. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Thermal Sensor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 iv www.hp.
Desktop Management Guide HP Intelligent Manageability provides standards-based solutions for managing and controlling desktops, workstations, and notebook PCs in a networked environment. HP pioneered desktop manageability in 1995 with the introduction of the industry’s first fully manageable desktop personal computers. HP holds a patent on the manageability technology.
Desktop Management Guide Initial Configuration and Deployment Your computer comes with a preinstalled system software image. After a brief software “unbundling” process, the computer is ready to be used. You may prefer to replace the preinstalled software image with a customized set of system and application software. There are several methods for deploying a customized software image. They include: ■ Installing additional software applications after unbundling the preinstalled software image.
Desktop Management Guide Remote System Installation Remote System Installation allows you to start and set up your system using the software and configuration information located on a network server by initiating the Preboot Execution Environment (PXE). The Remote System Installation feature is usually used as a system setup and configuration tool, and can be used for the following tasks: ■ Formatting a hard drive. ■ Deploying a software image on one or more new PCs.
Desktop Management Guide Software Updating and Management HP provides several tools for managing and updating software on desktops and workstations—Altiris eXpress; Altiris eXpress PC Transplant Pro; HP Client Manager Software, an Altiris eXpress solution; System Software Manager; HP Proactive Notification, and ActiveUpdate.
Desktop Management Guide Within minutes of installation, Altiris eXpress is able to install a disk image containing the operating system, application software, and the Altiris eXpress client, without requiring the use of a separate boot diskette. With Altiris eXpress, the network administrator can: ■ Create a new image or edit an existing image, or clone a PC on the network which may have the ideal image. ■ Create any number of customized disk images for a variety of workgroups.
Desktop Management Guide HP Client Manager Software HP Client Manager Software (HP CMS) tightly integrates HP Intelligent Manageability technology within Altiris eXpress to provide superior hardware management capabilities for HP access devices that include: ■ Detailed views of hardware inventory for asset management ■ PC health check monitoring and diagnostics ■ Proactive notification of changes in your hardware environment ■ Web-accessible reporting of business critical details such as machines wi
Desktop Management Guide HP Proactive Notification (HPPN) The HP Proactive Notification program uses the Subscriber's Choice secure Web site in order to proactively and automatically: ■ Send you Product Change Notification (PCN) emails informing you of hardware and software changes to most commercial computers and servers, up to 60 days in advance.
Desktop Management Guide ROM Flash Your computer comes with a reprogrammable flash ROM (read only memory). By establishing a setup password in Computer Setup (F10) Utility, you can protect the ROM from being unintentionally updated or overwritten. This is important to ensure the operating integrity of the computer. Should you need or want to upgrade your ROM, you may: Ä ■ Order an upgraded ROMPaq™ diskette from HP. ■ Download the latest ROMPaq images from http://www.hp.com/support.
Desktop Management Guide FailSafe Boot Block ROM The FailSafe Boot Block ROM allows for system recovery in the unlikely event of a ROM flash failure, for example, if a power failure were to occur during a ROM upgrade. The Boot Block is a flash-protected section of the ROM that checks for a valid system ROM flash when power to the system is turned on. ■ If the system ROM is valid, the system starts normally.
Desktop Management Guide The following table lists the various keyboard light combinations used by the Boot Block ROM (when a PS/2 keyboard is attached to the computer), and explains the meaning and action associated with each combination. Keyboard Light Combinations Used by Boot Block ROM Failsafe Boot Block Mode Keyboard LED Color Keyboard LED Activity Num Lock Green On ROMPaq diskette not present, is bad, or drive not ready. Caps Lock Green On Enter password.
Desktop Management Guide Replicating Your Setup This procedure gives an administrator the ability to easily copy one setup configuration to other computers of the same model. This allows for faster, more consistent configuration of multiple computers. To replicate your setup: 1. Access the Computer Setup Utilities (F10) menu. 2. Click File > Save to Diskette. Follow the instructions on the screen. requires a diskette drive or a supported USB flash media device, ✎ This such as DiskOnKey. 3.
Desktop Management Guide Dual-State Power Button With Advanced Configuration and Power Interface (ACPI) enabled for Windows 98, Windows 2000, and Windows XP, the power button can function either as an on/off switch or as a suspend button. The suspend feature does not completely turn off power, but instead causes the computer to enter a low-power standby. This allows you to quickly power down without closing applications and to quickly return to the same operational state without any data loss.
Desktop Management Guide Power Management Power Management is a feature that saves energy by shutting down certain components of the computer when they are not in use, saving energy without having to shut down the computer. With Advanced Configuration and Power Interface (ACPI) enabled for Windows 98, Windows 2000, Windows Millennium, and Windows XP, timeouts (the period of inactivity allowed before shutting down these components) can be enabled, customized, or disabled using the operating system. 1.
Desktop Management Guide World Wide Web Site HP engineers rigorously test and debug software developed by HP and third-party suppliers, and develop operating system specific support software, to ensure performance, compatibility, and reliability for HP computers. When making the transition to new or revised operating systems, it is important to implement the support software designed for that operating system.
Desktop Management Guide Asset Tracking and Security Asset tracking features incorporated into the computer provide key asset tracking data that can be managed using HP Insight Manager, HP Client Manager or other system management applications. Seamless, automatic integration between asset tracking features and these products enables you to choose the management tool that is best suited to your environment and to leverage your investment in existing tools.
Desktop Management Guide The following table and sections refer to managing security features of your computer locally through the Computer Setup Utilities (F10). Security Features Overview Feature Purpose How It Is Established Removable Media Boot Control Prevents booting from the removable media drives. From the Computer Setup Utilities (F10) menu.
Desktop Management Guide Security Features Overview (Continued) Feature Purpose How It Is Established Smart Cover Sensor Indicates that computer cover or side panel has been removed. Can be set to require the setup password to restart the computer, after the cover or side panel has been removed. Refer to the Hardware Reference Guide on the Documentation Library CD for more information about this feature. This feature is available on select models only. From the Computer Setup Utilities (F10) menu.
Desktop Management Guide Security Features Overview (Continued) Feature Purpose How It Is Established Ownership Tag Displays ownership information, as defined by the system administrator, during system startup (protected by setup password). From the Computer Setup Utilities (F10) menu. Cable Lock Provision Inhibits access to the interior of the computer to prevent unwanted configuration changes or component removal. Can also be used to secure the computer to a fixed object to prevent theft.
Desktop Management Guide Establishing a Setup Password Using Computer Setup Establishing a setup password through Computer Setup prevents reconfiguration of the computer (use of the Computer Setup (F10) utility) until the password is entered. 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. 2. When the F10 Setup message appears in the lower-right corner of the screen, press the F10 key. Press Enter to bypass the title screen, if necessary.
Desktop Management Guide Establishing a Power-On Password Using Computer Setup Establishing a power-on password through Computer Setup prevents access to the computer when power is turned on, unless the password is entered. When a power-on password is set, Computer Setup presents Password Options under the Security menu. Password options include Password Prompt on Warm Boot. When Password Prompt on Warm Boot is enabled, the password must also be entered each time the computer is rebooted. 1.
Desktop Management Guide Entering a Setup Password If a setup password has been established on the computer, you will be prompted to enter it each time you run Computer Setup. 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. 2. When the F10 = Setup message appears in the lower-right corner of the screen, press the F10 key. do not press the F10 key while the message is displayed, you ✎ Ifmustyourestart the computer to access the utility. 3.
Desktop Management Guide Changing a Power-On or Setup Password 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. To change the setup password, run Computer Setup. 2.
Desktop Management Guide National Keyboard Delimiter Characters Each keyboard is designed to meet country-specific requirements. The syntax and keys that you use for changing or deleting your password depend on the keyboard that came with your computer. National Keyboard Delimiter Characters Arabic / Greek - Russian / Belgian = Hebrew .
Desktop Management Guide DriveLock DriveLock is an industry-standard security feature that prevents unauthorized access to the data on specific hard drives. DriveLock has been implemented as an extension to Computer Setup. It is only available on certain systems and only when DriveLock-capable hard drives are detected. DriveLock is intended for HP customers for whom data security is the paramount concern.
Desktop Management Guide If a locked hard drive is present, POST will require a password to unlock the device. If a power-on password is set and it matches the device’s user password, POST will not prompt the user to re-enter the password. Otherwise, the user will be prompted to enter a DriveLock password. Either the master or the user password may be used. Users will have two attempts to enter a correct password. If neither attempt succeeds, POST will continue but the drive will remain inaccessible.
Desktop Management Guide Smart Cover Sensor Smart Cover Sensor, available on select models, is a combination of hardware and software technology that can alert you when the computer cover or side panel has been removed. There are three levels of protection, as described in the following table. Smart Cover Sensor Protection Levels Level Setting Description Level 0 Disabled Smart Cover Sensor is disabled (default).
Desktop Management Guide Setting the Smart Cover Sensor Protection Level To set the Smart Cover Sensor protection level, complete the following steps: 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. 2. When the F10 Setup message appears in the lower-right corner of the screen, press the F10 key. Press Enter to bypass the title screen, if necessary.
Desktop Management Guide Locking the Smart Cover Lock To activate and lock the Smart Cover Lock, complete the following steps: 1. Turn on or restart the computer. If you are in Windows, click Start > Shut Down > Restart the Computer. 2. When the F10 Setup message appears in the lower-right corner of the screen, press the F10 key. Press Enter to bypass the title screen, if necessary. do not press the F10 key while the message is displayed, you ✎ Ifmustyourestart the computer to access the utility. 3.
Desktop Management Guide Using the Smart Cover FailSafe Key If you enable the Smart Cover Lock and cannot enter your password to disable the lock, you will need a Smart Cover FailSafe Key to open the computer cover. You will need the key in any of the following circumstances: Ä ■ Power outage ■ Startup failure ■ PC component failure (such as processor or power supply) ■ Forgotten password CAUTION: The Smart Cover FailSafe Key is a specialized tool available from HP.
Desktop Management Guide Master Boot Record Security The Master Boot Record (MBR) contains information needed to successfully boot from a disk and to access the data stored on the disk. Master Boot Record Security may prevent unintentional or malicious changes to the MBR, such as those caused by some computer viruses or by the incorrect use of certain disk utilities. It also allows you to recover the “last known good” MBR, should changes to the MBR be detected when the system is restarted.
Desktop Management Guide Upon entering Computer Setup, you must ■ Save the MBR of the current bootable disk; ■ Restore the previously saved MBR; or ■ Disable the MBR Security feature. You must know the setup password, if one exists. If changes are detected and if the current bootable disk is not the same disk from which the MBR was previously saved, the following message is displayed: 2000—Master Boot Record Hard Drive has changed. Press any key to enter Setup to configure MBR Security.
Desktop Management Guide Before You Partition or Format the Current Bootable Disk Ensure that MBR Security is disabled before you change partitioning or formatting of the current bootable disk. Some disk utilities, such as FDISK and FORMAT, attempt to update the MBR. If MBR Security is enabled when you change partitioning or formatting of the disk, you may receive error messages from the disk utility or a warning from MBR Security the next time the computer is turned on or restarted.
Desktop Management Guide Fingerprint Identification Technology Eliminating the need to enter user passwords, HP Fingerprint Identification Technology tightens network security, simplifies the login process, and reduces the costs associated with managing corporate networks. Affordably priced, it is not just for high-tech, high-security organizations anymore. ✎ Support for Fingerprint Identification Technology varies by model. For more information, visit: http://www.compaq.
Desktop Management Guide Fault Notification and Recovery Fault Notification and Recovery features combine innovative hardware and software technology to prevent the loss of critical data and minimize unplanned downtime. When a fault occurs, the computer displays a Local Alert message containing a description of the fault and any recommended actions. You can then view current system health by using the HP Client Manager.
Index A access to computer, controlling 15 ActiveUpdate 7 Altiris eXpress 4 Altiris eXpress PC Transplant Pro 5 asset tracking 15 B bootable disk, important information 32 C cable lock provision 32 cautions cover lock security 27 FailSafe Key 29 protecting ROM 8 changing operating systems, important information 14 changing password 22 clearing password 23 cloning tools, software 2 Computer Setup Utilities 11 configuring power button 12 controlling access to computer 15 cover lock security, caution 27 cove
Index L Remote System Installation, accessing 3 ROM keyboard lights, table 10 ROM, invalid 9 ROM, upgrading 8 locking Smart Cover Lock 28 M Master Boot Record Security, setting 30 S N national keyboard delimiter characters 23 O operating systems, important information about 14 ordering FailSafe Key 29 P partitioning disk, important information 32 password changing 22 clearing 23 deleting 22 power-on 20 setup 19, 21 password security 18 power button configuring 12 dual-state 12 Power Management 13 po
Index Remote ROM Flash 8 Remote System Installation 3 System Software Manager 6 updating multiple machines 6 SSM (System Software Manager) 6 surge-tolerant power supply 34 system recovery 9 System Software Manager (SSM) 6 T temperature, internal computer 34 thermal sensor 34 timeouts, setting 13 Desktop Management Guide U unlocking Smart Cover Lock 28 upgrading ROM 8 URLs (Web sites). See Web sites W Web sites www.compaq.com 8, 14 www.compaq.com/activeupdate 7 www.compaq.com/easydeploy 5, 6, 8, 11 www.
Index Index–4 www.hp.
