Intel SBT2 Product Guide - Page 16

Security, Security with Mechanical Locks and Monitoring, Software Locks - server board

Page 16 highlights

Security To help prevent unauthorized entry or use of the server, Intel® Server Control server management software monitors the system intrusion switch. Security with Mechanical Locks and Monitoring If installed, you can activate the chassis intrusion alarm switch. When the side door is opened, the switch transmits an alarm signal to the server board, where BMC firmware and server management software process the signal. The system can be programmed to respond to an intrusion by powering down or by locking the keyboard, for example. Software Locks The BIOS Setup and the System Setup Utility (SSU) provide a number of security features to prevent unauthorized or accidental access to the system. Once the security measures are enabled, you can access the system only after you enter the correct password(s). For example: • Enable the keyboard lockout timer so that the server requires a password to reactivate the keyboard and mouse after a specified time out period1 to 120 minutes. • Set and enable an supervisor password. • Set and enable a user password. • Set secure mode to prevent keyboard or mouse input and to prevent use of the front panel reset and power switches. • Activate a hot key combination to enter secure mode quickly. • Disable writing to the diskette drive when secure mode is set. • Disable access to the boot sector of the operating system hard disk drive. Using Passwords You can set either the user password, the supervisor password, or both passwords. If only the user password is set, you: • Must enter the user password to enter BIOS Setup or the SSU. • Must enter the user password to boot the server if Password on Boot is enabled in either the BIOS Setup or SSU. • Must enter the user password to exit secure mode. If only the supervisor password is set, you: • Must enter the supervisor password to enter BIOS Setup or the SSU. • Must enter the supervisor password to boot the server if Password on Boot is enabled in either the BIOS Setup or SSU. • Must enter the supervisor password to exit secure mode. If both passwords are set, you: • May enter the user password to enter BIOS Setup or the SSU. However, you will not be able to change many of the options. • Must enter the supervisor password if you want to enter BIOS Setup or the SSU and have access to all of the options. 16 Description

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84

16
Description
Security
To help prevent unauthorized entry or use of the server, Intel
®
Server Control server management
software monitors the system intrusion switch.
Security with Mechanical Locks and Monitoring
If installed, you can activate the chassis intrusion alarm switch.
When the side door is opened, the
switch transmits an alarm signal to the server board, where BMC firmware and server management
software process the signal.
The system can be programmed to respond to an intrusion by
powering down or by locking the keyboard, for example.
Software Locks
The BIOS Setup and the System Setup Utility (SSU) provide a number of security features to
prevent unauthorized or accidental access to the system.
Once the security measures are enabled,
you can access the system only after you enter the correct password(s).
For example:
Enable the keyboard lockout timer so that the server requires a password to reactivate the
keyboard and mouse after a specified time out period
1 to 120 minutes.
Set and enable an supervisor password.
Set and enable a user password.
Set secure mode to prevent keyboard or mouse input and to prevent use of the front panel reset
and power switches.
Activate a hot key combination to enter secure mode quickly.
Disable writing to the diskette drive when secure mode is set.
Disable access to the boot sector of the operating system hard disk drive.
Using Passwords
You can set either the user password, the supervisor password, or both passwords.
If only the user
password is set, you:
Must enter the user password to enter BIOS Setup or the SSU.
Must enter the user password to boot the server if Password on Boot is enabled in either the
BIOS Setup or SSU.
Must enter the user password to exit secure mode.
If only the supervisor password is set, you:
Must enter the supervisor password to enter BIOS Setup or the SSU.
Must enter the supervisor password to boot the server if Password on Boot is enabled in either
the BIOS Setup or SSU.
Must enter the supervisor password to exit secure mode.
If both passwords are set, you:
May enter the user password to enter BIOS Setup or the SSU.
However, you will not be able to
change many of the options.
Must enter the supervisor password if you want to enter BIOS Setup or the SSU and have
access to all of the options.