HP Xw6600 HP xw6600 Workstation Service and Technical Reference Guide - Page 47

Password security, Establishing a setup password using the Computer Setup (F10) Utility

Page 47 highlights

● By disabling parallel, serial, or USB ports, or by disabling removable-media boot capability, you can protect valuable data assets. ● Memory Change and Hood Sensor (Smart Cover Sensor) alerts can be automatically forwarded to system management applications to deliver proactive notification of tampering with a workstation's internal components. ProtectTools, the Hood Sensor (Smart Cover Sensor), and the (Smart Cover Lock) are available as options on select systems. Use the following utilities to manage security settings on the HP workstation: ● Locally, using the Computer Setup (F10) Utility ● Remotely, using HP CMS or SSM which enables the secure, consistent deployment and control of security settings from a simple command line utility The following table and sections refer to the management of workstation security through the Computer Setup (F10) Utility. Table 3-2 Security features overview Feature Purpose How it is established Removable Media Boot Control Prevents booting from removable media drives From the Computer Setup (F10) Utility menu Serial, Parallel, USB, or Infrared Prevents transfer of data through the Interface Control integrated serial, parallel, USB, or infrared interface From the Computer Setup (F10) Utility menu Power-On Password Prevents use of the workstation until the From the Computer Setup (F10) password is entered (applies to initial system Utility menu startup and restarts) Setup Password Prevents reconfiguration of the workstation From the Computer Setup (F10) (use of the Setup utility) until the password is Utility menu entered Network Server Mode Provides unique security features for workstations used as servers From the Computer Setup (F10) Utility menu NOTE: For more information about the Computer Setup (F10) Utility, see The Computer Setup (F10) Utility menu on page 25. Password security The power-on password prevents unauthorized use of the workstation by requiring entry of a password to access applications or data when the workstation is powered on or restarted. The setup password specifically prevents unauthorized access to the Computer Setup (F10) Utility and can also be used as an override to the power-on password. When prompted for the power-on password, entering the setup password instead enables access to the workstation. You can establish a network-wide setup password to enable the system administrator to log in to all network systems to perform maintenance without needing to know the power-on password. SSM and HP CMS enable remote management of setup passwords and other BIOS settings in a networked environment. For more information, see http://www.hp.com/go/easydeploy. Establishing a setup password using the Computer Setup (F10) Utility Establishing a setup password through the Computer Setup (F10) Utility prevents reconfiguration of the workstation (through the use of the Computer Setup (F10) Utility) until the password is entered. ENWW Workstation management 37

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170

By disabling parallel, serial, or USB ports, or by disabling removable-media boot capability, you
can protect valuable data assets.
Memory Change and Hood Sensor (Smart Cover Sensor) alerts can be automatically forwarded
to system management applications to deliver proactive notification of tampering with a
workstation’s internal components.
ProtectTools, the Hood Sensor (Smart Cover Sensor), and the (Smart Cover Lock) are available as
options on select systems.
Use the following utilities to manage security settings on the HP workstation:
Locally, using the Computer Setup (F10) Utility
Remotely, using HP CMS or SSM which enables the secure, consistent deployment and control
of security settings from a simple command line utility
The following table and sections refer to the management of workstation security through the Computer
Setup (F10) Utility.
Table 3-2
Security features overview
Feature
Purpose
How it is established
Removable Media Boot Control
Prevents booting from removable media
drives
From the Computer Setup (F10)
Utility menu
Serial, Parallel, USB, or Infrared
Interface Control
Prevents transfer of data through the
integrated serial, parallel, USB, or infrared
interface
From the Computer Setup (F10)
Utility menu
Power-On Password
Prevents use of the workstation until the
password is entered (applies to initial system
startup and restarts)
From the Computer Setup (F10)
Utility menu
Setup Password
Prevents reconfiguration of the workstation
(use of the Setup utility) until the password is
entered
From the Computer Setup (F10)
Utility menu
Network Server Mode
Provides unique security features for
workstations used as servers
From the Computer Setup (F10)
Utility menu
NOTE
: For more information about the Computer Setup (F10) Utility, see
The Computer Setup (F10) Utility menu
on page
25
.
Password security
The power-on password prevents unauthorized use of the workstation by requiring entry of a password
to access applications or data when the workstation is powered on or restarted. The setup password
specifically prevents unauthorized access to the Computer Setup (F10) Utility and can also be used as
an override to the power-on password. When prompted for the power-on password, entering the setup
password instead enables access to the workstation.
You can establish a network-wide setup password to enable the system administrator to log in to all
network systems to perform maintenance without needing to know the power-on password.
SSM and HP CMS enable remote management of setup passwords and other BIOS settings in a
networked environment. For more information, see
go/easydeploy
.
Establishing a setup password using the Computer Setup (F10) Utility
Establishing a setup password through the Computer Setup (F10) Utility prevents reconfiguration of the
workstation (through the use of the Computer Setup (F10) Utility) until the password is entered.
ENWW
Workstation management
37