Added support for Z2 G4 TWR/Mini/SFF workstation

Models/HP Z2 Mini G4 Workstation/-DISABLED--Shared-BIOS-Password.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Mini G4 Workstation/Shared-Activate-UEFIBoot.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Mini G4 Workstation/Shared-BIOS-Settings.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Mini G4 Workstation/Shared-BIOS-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Mini G4 Workstation/Shared-ME-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Mini G4 Workstation/Shared-TPM-BIOS-Settings.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Mini G4 Workstation/Shared-TPM-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == TPM SLB 9670

Models/HP Z2 SFF G4 Workstation/-DISABLED--Shared-BIOS-Password.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 SFF G4 Workstation/Shared-Activate-UEFIBoot.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 SFF G4 Workstation/Shared-BIOS-Settings.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 SFF G4 Workstation/Shared-BIOS-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 SFF G4 Workstation/Shared-ME-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 SFF G4 Workstation/Shared-TPM-BIOS-Settings.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 SFF G4 Workstation/Shared-TPM-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == TPM SLB 9670

Models/HP Z2 Tower G4 Workstation/-DISABLED--Shared-BIOS-Password.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Tower G4 Workstation/Shared-Activate-UEFIBoot.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Tower G4 Workstation/Shared-BIOS-Settings.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Tower G4 Workstation/Shared-BIOS-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Tower G4 Workstation/Shared-ME-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Tower G4 Workstation/Shared-TPM-BIOS-Settings.txt

@@ -0,0 +1,2 @@
+
+Directory == HP Z2 G4

Models/HP Z2 Tower G4 Workstation/Shared-TPM-Update.txt

@@ -0,0 +1,2 @@
+
+Directory == TPM SLB 9670

Shared/HP Z2 G4/Activate-UEFIBoot.txt

@@ -0,0 +1,5 @@
+#Z2 G4
+
+Configure Legacy Support and Secure Boot==Legacy Support Disable and Secure Boot Enable
+
+

Shared/HP Z2 G4/BIOS-1.01.08/SPDownload.txt

@@ -0,0 +1,3 @@
+
+SPaqURL==https://ftp.hp.com/pub/softpaq/sp92001-92500/sp92215.exe
+NoteURL==https://ftp.hp.com/pub/softpaq/sp92001-92500/sp92215.html

Shared/HP Z2 G4/BIOS-Settings.txt

@@ -0,0 +1,58 @@
+#Z2 G4 BIOS Settings
+
+## Main boot options
+Configure Legacy Support and Secure Boot == Legacy Support Disable and Secure Boot Enable
+UEFI Boot Options == Enable
+Enable MS UEFI CA key == Yes
+Fast Boot == Disable
+
+
+## TPM
+TPM State == Enable
+TPM Device == Available
+TPM Activation Policy == No prompts
+
+
+## Security features turned ON
+Enhanced HP Firmware Runtime Intrusion Prevention and Detection == Enable
+Sure Start Secure Boot Keys Protection == Enable
+Sure Start Security Event Boot Notification == Require Acknowledgment
+Sure Start Security Event Policy == Log Event and notify user
+SureStart Production Mode == Enable
+
+
+## BIOS security settings
+Sure Start BIOS Settings Protection == Disable
+Ready BIOS for Device Guard Use == Do Nothing
+Automatic BIOS Update Setting == Disable
+Lock BIOS Version == Disable
+Absolute Persistence Module Current State == Inactive
+
+
+## CPU settings
+Hyperthreading == Enable
+Multi-processor == Enable
+Turbo-boost == Enable
+
+
+## CPU features
+Virtualization Technology (VTx) == Enable
+Virtualization Technology for Directed I/O (VTd) == Enable
+#the value is not called "Software Controlled" in this BIOS version
+Intel Software Guard Extensions (SGX) == Software control
+Trusted Execution Technology (TXT) == Disable
+
+
+## Intel ME
+Intel Active Management Technology (AMT) == Disable
+
+
+## Other settings
+S4/S5 Maximum Power Savings == Disable
+#NumLock on at boot == Enable
+
+
+## Ownership
+Asset Tracking Number == @@COMPUTERNAME@@
+#Ownership Tag == Property of ...
+

Shared/HP Z2 G4/BIOS-Update.txt

@@ -0,0 +1,22 @@
+# Z2 G4 BIOS Update
+
+
+# The BIOS version the device should be on
+Version == 1.01.08
+
+# Command to be executed for the BIOS update
+Command == HPFWUPDREC\HpFirmwareUpdRec64.exe 
+
+# Arguments passed to COMMAND
+
+# Silent
+Arg1 == -s
+
+# Do not restart automatically
+Arg2 == -r
+
+# Disable/Suspend BitLocker during upgrade
+Arg3 == -b
+
+# Password file (will be removed if no password is used)
+Arg4 == -p"@@PASSWORD_FILE@@"

Shared/HP Z2 G4/ME-12.0.7.1122/SPDownload.txt

@@ -0,0 +1,3 @@
+
+SPaqURL==https://ftp.hp.com/pub/softpaq/sp92001-92500/sp92206.exe
+NoteURL==https://ftp.hp.com/pub/softpaq/sp92001-92500/sp92206.html

Shared/HP Z2 G4/ME-Update.txt

@@ -0,0 +1,19 @@
+# Z2 G4 ME Update
+
+# The ME firmware version the device should have
+Version == 12.0.7.1122
+
+#Command to be executed for the ME update
+
+# NOTE: CallInst.exe is NOT included in the original  
+#       download from HP. Please copy this file from 
+#       a ME-xxx folder from a different model. 
+
+Command == CallInst.exe
+Arg1 == /app silent.bat
+Arg2 == /hide
+
+
+# Ignore ME detection errors
+# If activated, a failure to get the current ME version is ignored, and the script will continue.
+IgnoreMEDetectionError == Yes

Shared/HP Z2 G4/TPM-BIOS-Settings.txt

@@ -0,0 +1,9 @@
+# Z2 BIOS Settings required for TPM update
+
+# No F1 prompt for TPM update
+TPM Activation Policy==No prompts
+
+# When these options are activated, no TPM firmware can be installed
+Intel Software Guard Extensions (SGX)==Disable
+Trusted Execution Technology (TXT)==Disable
+Virtualization Technology (VTx)==Disable