Selling the HP Business Personal Systems Portfolio | HP’s pillars

HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

Security—HP security stack

DEVICE IDENTITY DATA

HP Image Assistant Gen3
ABOVE THE Image creation and testing

OS HP MIK Gen210
Centralized security management

HP Sure View Gen29

Built-in privacy screen

HP Sure Click8
HP Client Security Manager Gen4 11 Browsing security solution
IN HP Sure Recover4
Automated network-based image recovery
THE OS HP Multi-Factor Authenticate Gen25
(Intel only) MFA with hardened policies, 3-factor
authentication, face log-in
HP Sure Sense12
HP Sure Run3
Protection for critical applications
multi-factor authentication
2-factor authentication
HP Secure Erase7
Permanent data removal on HDD/SSD
HP Sure Start Gen4 2
Self-healing BIOS with Runtime Intrusion Detection
HP SpareKey
BELOW Self-service password recovery Self-Encrypting Drives6
HP BIOSphere Gen41
THE OS Comprehensive BIOS management
HW data encryption

HP Endpoint Security Controller

HP innovations Industry standard

Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP BIOSphere Gen4
Ecosystem of protections
to help defend your PC

Building on over a decade of BIOS security

leadership, HP BIOSphere Gen4 offers an
ecosystem of protections to help defend
your PC, including automated protections,
customizable safeguards, and easy
manageability to protect against attacks
without interrupting employee
productivity.1
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Sure Start Gen4

Protects the PC at its most
fundamental level2

HP Sure Start Gen4 perpetually inspects

the system BIOS and automatically self-
heals if the BIOS is damaged by malware,
rootkits, or corruption. By ensuring that
only trusted BIOS code is executed, HP
Sure Start protects your PC at its most
fundamental level.2
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Sure Run
Keeps critical
processes running

HP Sure Run uses hardware-enforced

protection to keep critical processes
running, even if malware tries to shut
them down. Backed by the HP Endpoint
Security Controller, HP Sure Run monitors
key processes, alerts users and IT of any
changes, and restarts them automatically
if they are stopped.3
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Sure Recover
Restore machines
quickly and securely

Built into system hardware and firmware,

HP Sure Recover enables users to restore
their machines quickly and securely to the
latest image using only a network
connection. It can even enable IT to
schedule reimaging for the entire fleet.4
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Image Assistant Gen3 HP Image Assistant Gen3

Develop and maintain a
robust software image

REFERENCE HP Image Assistant helps you develop and

IMAGE maintain a robust software image, ensure
TA R G E T
IMAGE that it remains up to date with the latest
patches and upgrades, and implement it
consistently on PCs throughout your
business.

IMPROVE YOUR IMAGE

Build better software images in minutes
with HP Image Assistant
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP MIK Gen2
Maintain a fleet of PCs

The HP Manageability Integration Kit (MIK)

is designed to integrate with Microsoft
Image Creation System Center Configuration Manager
• Set BIOS Configuration (BCU) (SCCM) to help IT administrators update
• Create HP Client Boot Image
and maintain software and security
• Create Deployment Task Sequences
• Download and Import HP Driver Packs settings across your fleet of PCs.10

Security Management
• Credential Management • JITA
• Port control Management • TPM Management
• HP Multi-Factor Authenticate21 • HP Sure Start Policies
• multi-factor authentication • Device Guard

BIOS Management
• Set and report BIOS settings (BCU with GUI)
• Graphical user interface to set 100+ BIOS settings.
• UEFI vs Legacy
• Boot Order
• BIOS Version Lock
• Enable/Disable Virtualization Support
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Client Security Manager

Configure and control a
variety of security features

HP Client Security Manager Gen411 offers a

broad selection of powerful security
solutions for businesses of any size,
designed to outpace today’s cyber threats
and protect your devices, identity, and
data.
 Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Multi-Factor
Number of Factors

Three-factor Authenticate Gen2

Something
Something you are P@$$W()RD Three factors of
Something you have
Single-factor you know SmartCard authentication for login
P@$$W()RD SmartCard
HP Multi-Factor Authenticate Gen2 helps
Security Strength Posture
keep your network and VPN safe from
unauthorized access by requiring up to
PIN, biometrics, keys, three factors of authentication for login—
tokens and associated including optional fingerprint reader and IR
3 factor authentication certificates are camera facial recognition—with policies
makes y our login Captured, Encrypted, hardened at the silicon level.5
a million times Matched, and Stored in
more secure the Hardware, out of HP Multi-Factor Authenticate Gen2 is
sight and reach from configured and deployed via HP
typical attack methods. Manageability Integration Kit plug-in for
Microsoft® SCCM.
HP MULTI-FACTOR AUTHENTICATE
HARDENED and MANAGEABLE Multi-factor authentication
Integrated and manageable implementation of Intel®
Authenticate (v3)
 Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

multi-factor authentication
Number of Factors

Two-factor Two factors of

Something
Something you are P@$$W()RD authentication for login
Something you have
you know SmartCard
Single-factor

P@$$W()RD SmartCard
multi-factor authentication helps keep
Security Strength Posture
your network and VPN safe from
unauthorized access by requiring up to two
PIN, biometrics, keys, factors of authentication for login—
tokens and associated including optional fingerprint reader and IR
2 factor authentication certificates are camera facial recognition.
makes it much harder for Captured, Encrypted,
attackers to steal Matched, and Stored in May be locally managed via HP Client
identities the Hardware, out of Security Manager at the client, or HP
sight and reach from Manageability Integration Kit enables
typical attack methods. remote management via Microsoft® SCCM.
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP SpareKey
Reset passwords and
restore access to locked PCs

Forgot your Windows password? HP

SpareKey can reset passwords and restore
access to locked PCs without intervention
from IT personnel by taking the user
through a series of predetermined security
questions.
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Sure View Gen2

Prevents visual hacking

Even the best security software can’t

prevent visual hacking—unauthorized
users viewing confidential information on
an unguarded display. At the touch of
a button, HP Sure View Gen2 activates an
integrated privacy screen that makes data
visible only to the user sitting directly in
front of it.9
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Sure Click
Secure browsing solution

Web browsers are a primary attack vector

for malware and other online threats. HP
Sure Click is a hardware-enforced secure
browsing solution that isolates web
content in a CPU-isolated virtual machine,
where malware cannot affect other tabs,
applications, or the operating system.8
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Sure Sense12
Harness the power of deep
learning

HP Sure Sense enables real-time malware

protection using deep neural nets—deep
learning technology—that enables it to
recognize malware attacks instinctively—more
like the way a human mind does.

This lightweight agent is able to provide

effective built-in and AI-based malware
defense—and it is available pre-installed on our
latest HP Elite PCs.

HP Sure Sense capabilities:

>99% <20ms
AVERAGE TIME TO
RANSOMWARE
BEHAVIORAL DETECTION
• Protect against never before seen (i.e. zero-
day) attacks
MALWARE PREVENTION13 AND PROTECTION
DETECTION14 • Prevent infections before they happen, by
scanning files before they execute and
quarantining any potentially malicious files
WORKS OFFLINE
AND REQUIRES • Minimal performance impact
INFREQUENT UPDATES15

• Available at no additional cost

Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Secure Erase
Permanently destroys
ENSURE WORRY-FREE DEVICE DISPOSAL sensitive information
with HP Secure Erase
Simply deleting files from a hard drive
doesn’t make them unrecoverable. HP
Secure Erase is a BIOS-level feature that
permanently destroys sensitive
information from hard drives and solid-
state drives, so it can never be recovered
or compromised.7
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

Self-Encrypting Drives
Hardware-based
Self-Encrypting Drive encryption to protect data

Self-encrypting hard drives and solid-state

drives employ hardware-based encryption
to protect their contents even after the
EVEN IF YOUR DEVICE drive is removed from the PC. And because
the data encryption process is hardware-
GETS LOST OR based, there’s little or no discernable

STOLEN, OR WHEN impact on performance.6

THE DRIVE IS
REMOVED, YOUR
DATA CAN’T BE
BREACHED
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

HP Endpoint Security
Controller
Foundation of the security
architecture
The HP Endpoint Security Controller is the
hardware component at the foundation of
the security architecture of our Elite PCs.
Its physically isolated and
cryptographically protected hardware
creates the root of trust that enables
hardware-enforced, self-healing,
manageable security solutions like HP
Sure Start Gen4, HP Sure Run, and HP Sure
Recover.
Selling the HP Business Personal Systems Portfolio | HP’s pillars
HP Confidential. For HP and Channel training purposes only. © Copyright 2019 HP Development Company, L.P.

Disclaimers
1HP BIOSphere Gen4 requires 8th generation Intel® or AMD processors. Features may vary depending on the platform and configurations.
2HP Sure Start Gen4 is available on HP Elite and HP Pro 600 products equipped with 8th generation Intel processors.
3HP Sure Run is available on HP Elite products equipped with 8th generation Intel or AMD processors.
4HP Sure Recover is available on HP Elite PCs with 8th generation Intel or AMD processors and requires an open, wired network
connection. Not available on platforms with multiple internal storage drives or Intel Optane™. You must back up important files, data,
photos, videos, etc. before use to avoid loss of data.
5HP Multi-Factor Authenticate Gen2 requires Windows, a 7th or 8th generation Intel Core™ processor, Intel integrated graphics, and Intel
WLAN. Microsoft System Center Configuration Manager is required for deployment. Three-factor authentication requires Intel vPro™.
Authentication factors may require optional hardware.
6Self-encrypting drives are available as an option on select HP PCs.
7HP Secure Erase conforms to the methods outlined in the National Institute of Standards and Technology Special Publication 800-88
“Clear” sanitation method.
8HP Sure Click is available on select HP platforms and supports Microsoft Internet Explorer and Chromium. Check
[Link] for all compatible platforms as they become available.
9HP Sure View integrated privacy screen is an optional feature that must be configured at purchase.
10HP Manageability Integration Kit can be downloaded from [Link]/go/clientmanagement.
11HP Client Security Manager Gen4 requires Windows and Intel® or AMD 8th generation processors.
12HP Sure Sense requires Windows 10. See product specifications for availability.
13HP Internal Testing conducted on July 2018, using ASTM International Standards Worldwide using test method ASTM D4060.
14Detection Speed may vary based on CPU speed, system memory, size of the malware file, and other factors.
15Updated approximately once every three months, as opposed to the 2-3x a day required by legacy antivirus solutions.