HP Connect for Microsoft Endpoint Manager - User Guide PDF (EN)

HP Connect for Microsoft Endpoint Manager - User Guide DISCLAIMER: Content may be changed at any time Page 1 September 27, 2022 Version 1.2.0 © 2022 HP Development Company, L.P. The information contained herein is subject to change without notice.

Стр. 1

Table of Contents HP Connect for Microsoft Endpoint Manager - User Guide ...................................................................................... 1 HP Connect for Microsoft Endpoint Manager ........................................................................................................... 5 Requirements ............................................................................................................................................................. 5 Onboarding Process ...................................................................................................................................................

6 Offboarding Process ................................................................................................................................................... 7 The HP Connect Sidebar Menu .................................................................................................................................. 9 The Home Tab ........................................................................................................................................................ 9 The Policies Tab......................................................................................................................................................

9 Creating a Policy ............................................................................................................................................... 10 Editing a Policy ................................................................................................................................................. 10 Adding/Removing Groups to a Policy .............................................................................................................. 11 How is a Policy Applied ....................................................................................................................................

12 The Groups tab..................................................................................................................................................... 13 The Secrets tab..................................................................................................................................................... 13 Adding Sure Admin secrets to the Vault .......................................................................................................... 14 Adding Password secrets to the Vault .............................................................................................................

15 HP Connect Policies.................................................................................................................................................. 17 BIOS Updates Policies .......................................................................................................................................... 17 Steps to create a BIOS Update Policy............................................................................................................... 19 How is the Policy Applied .................................................................................................................................

20 BIOS Settings Policies – Platform Specific ............................................................................................................ 22 Steps to create a BIOS Settings Policy .............................................................................................................. 22 How is the Policy Applied ................................................................................................................................. 23 BIOS Settings Policies – Global Settings ...............................................................................................................

23 Steps to create a Global BIOS Settings Policy .................................................................................................. 24 BIOS Authentication Policies ................................................................................................................................ 26 Authenticating with HP Sure Admin ................................................................................................................ 26 Authenticating with BIOS Passwords ............................................................................................................... 27 Page 2 September 27, 2022 Version 1.2.0 © 2022 HP Development Company, L.P.

The information contained herein is subject to change without notice.

Стр. 2

Removing BIOS authentication Policy .............................................................................................................. 28 Steps to create a BIOS Authentication Policy .................................................................................................. 28 How is the Policy Applied ................................................................................................................................. 29 Appendix A: HP Sure Admin/Secure Platform Management...................................................................................

30 HP Sure Admin ..................................................................................................................................................... 30 Secure Platform Management ......................................................................................................................... 30 Protection for Local F10 Access ....................................................................................................................... 30 Devices with currently provisioned HP Sure Admin ........................................................................................

32 OpenSSL and certificates ..................................................................................................................................... 33 How to Create the Endorsement Key Certificate ............................................................................................. 33 How to Create the Signing Key Certificate ....................................................................................................... 34 How to Create the Local Access Key (LAK) Certificate ..................................................................................... 34 Appendix B:

Troubleshooting and Logs ................................................................................................................... 35 Sync a Policy ......................................................................................................................................................... 35 Sync from Device .............................................................................................................................................. 35 Sync from Intune admin center .......................................................................................................................

35 Logs ...................................................................................................................................................................... 36 Managed device ............................................................................................................................................... 36 Information from Endpoint Manager Console................................................................................................. 37 Notes about MEM compliance policies ........................................................................................................... 38 Appendix C:

Azure Active Access ............................................................................................................................. 39 Required permissions .......................................................................................................................................... 39 Permissions in Azure ............................................................................................................................................ 40 Permissions Descriptions .................................................................................................................................

42 Removing Access to HP Connect ...................................................................................................................... 43 Appendix D: HP Connect Supported HP Models ...................................................................................................... 44 Appendix E: Usage FAQ ............................................................................................................................................ 51 HP Connect for MEM ............................................................................................................................................... 51 How do I add HP Connect to my existing Azure tenant?

..................................................................................... 51 Will HP Connect support other consoles? ........................................................................................................... 51 Who is authorized to access HP Connect and create policies? ........................................................................... 51 Is there a cost for using HP Connect? .................................................................................................................. 51 Permissions granted during Early Access/Pilot ....................................................................................................

51 Page 3 September 27, 2022 Version 1.2.0 © 2022 HP Development Company, L.P. The information contained herein is subject to change without notice.

Стр. 3

Do I have to install anything on a device to support HP Connect? ...................................................................... 51 Do I have to install CMSL on each managed HP system? .................................................................................... 51 What systems are supported by HP Connect? .................................................................................................... 51 What Windows versions are supported by HP Connect? .................................................................................... 52 Does HP Connect maintain separate logs?

.......................................................................................................... 52 HP Connect fails to retrieve device groups .......................................................................................................... 52 About Policies .......................................................................................................................................................... 52 What devices are targeted when a HP Connect policy is published to a device group? ..................................... 52 What is the outcome of publishing an HP Connect policy to MEM? ...................................................................

52 Can multiple policies be applied to the same device group? .............................................................................. 52 Can I modify the check-in schedule of a proactive remediation? ....................................................................... 52 I published a policy, and nothing happens on the devices .................................................................................. 53 Device does not get policy even after I Sync manually ........................................................................................ 53 In MEM, how do I check the status of a Proactive Remediation for a device? ...................................................

53 BIOS Update Policies ................................................................................................................................................ 53 Missing BIOS Updates .......................................................................................................................................... 53 What if a user dismisses the restart toaster notification?................................................................................... 54 What happens if a device is not plugged-in when doing a BIOS update? ...........................................................

54 I cannot downgrade the BIOS with an HP Connect policy ................................................................................... 54 I get a missing BIOS setting error and the BIOS update fails ............................................................................... 54 How Is Microsoft Bitlocker handled? ................................................................................................................... 54 BIOS Authentication Policies ....................................................................................................................................

54 Managing BIOS passwords ................................................................................................................................... 54 Managing HP Sure Admin BIOS authentication ................................................................................................... 55 What happens if I remove an authentication policy from a device group? ........................................................ 56 BIOS Setting Policies ................................................................................................................................................

56 Can I apply a Settings policy to multiple platforms?............................................................................................ 56 What is the meaning of the icon shown next to some settings? ......................................................................... 56 Why didn’t a BIOS setting get set?................................................................................................................... 56 Page 4 September 27, 2022 Version 1.2.0 © 2022 HP Development Company, L.P. The information contained herein is subject to change without notice.

Стр. 4