Comments (3)
No, this can be bypassed, this is hard coded. Any change, that the BIOS sees as an decrease in security (e.g. turning SGX off) will trigger a PPI prompt. The other way around, e.g. activating SGX should go through directly.
You can turn of PPI, but this change will trigger an PPI prompt itself. Also, I would not recommend this at all, PPI is to prevent "under the hood" changes that might weaken your security settings without anyone noticing.
If you really, really need to get PPI out of your way, the only way would be to talk to your HP sales person if HP can deliver devices with custom BIOS settings (factory set to your defaults). But I believe they only offer this in some markets and require a minimum amount of devices orders.
from biossledgehammer.
I think you meant to say this can't be bypassed, right? Alright this makes sense, and I appreciate the quick response!
By any chance do you know if the BIOS can be updated if the Intel Software Guard Extensions (SGX) setting is set to "Software Control" instead of "Enabled"? I will test Monday in the lab but thought I'd ask just in case you're familiar with it.
from biossledgehammer.
Yes, you are right, this was an typo. Sorry. It should read: It can't be bypassed.
I'm not aware that there is any difference for the BIOS update process if the SGX setting is changed. However, we do not use SGX.
I could think that if SGX requires some sort of "activation" for a SGX enclave (key enrollment) and you try an BIOS update after this that also includes an fTPM update, there might be an additional prompt as most likely the enclave key will be deleted.
from biossledgehammer.
Related Issues (20)
- Communication with BCU fails for systems with PowerShell 4.0 HOT 2
- BIOS update needs BIOS-Update-Settings.txt HOT 37
- Running BiosSledgehammer.ps1 from SCCM task sequence HOT 23
- New HPFIRMWAREUPDREC tool with new HP models HOT 3
- Enable TPM before TPM Update section HOT 10
- IFXTPMUpdate_TPM12_v0443.com HOT 2
- HP EliteBoolk Folio 9480m - BIOS Update 1.46/ME Update 9.5.65.3000 HOT 1
- HP EliteBook 9470m - BIOS Update F.72 (ME is still the same) HOT 1
- HP EliteBook 8xx G4 (Shared): BIOS 01.25/ME 11.8.60.3561 HOT 1
- HP EliteBook 8xx G5 (Shared): BIOS Update 1.06 HOT 1
- Update BIOS Configuration Utility (BCU) to 4.0.26.1 HOT 1
- Change TPM-BIOS-Settings.txt to TPM-Update-BIOS-Settings.txt HOT 1
- Ampersand in BIOS Settings HOT 5
- Issues getting HP EliteDesk 800 G1 SFF to boot after applying BIOS settings HOT 2
- Issues updating HP Elite Compaq 8300 BIOS HOT 3
- Not running as expected HOT 2
- Can't update BIOS settings since BIOS manual upgrade HOT 1
- HP ZBook 14 G2 Model Not Listed - Can't Update TPM from 1.2 to 2.0 HOT 1
- AMD Dash support?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from biossledgehammer.