HP Z440 Maintenance and Service Guide - Page 49

Password security, Establishing a setup password using Computer Setup (F10) Utility

Page 49 highlights

In a single-drive computer, when DriveLock is enabled, the computer might not be able to boot to the operating system, and might try to boot from the network or from another storage device (depending on the boot ordering options). Regardless of the outcome of the start attempts, the locked drive remains inaccessible without the DriveLock password. In a two-drive computer that has a boot drive and a data drive, you can apply the DriveLock feature to the data drive only. In this case, the computer can always start, but the data drive is accessible only when the DriveLock password is entered. Cold starts require that you enter DriveLock passwords. However, DriveLock passwords are also required for warm starts. For example, if you boot to DOS and press Ctrl+Alt+Del, you must enter the DriveLock password before the computer completes the next start cycle. This warm-start behavior is consistent with the DriveLock feature. Password security The power-on password prevents unauthorized access to applications or data when the computer is turned on or restarted. The setup password specifically prevents unauthorized access to the Computer Setup (F10) Utility and can also be used as an override to the power-on password. An administrator can enter the setup password at the prompt for the power-on password and gain access to the computer. You can establish a network-wide setup password to enable the system administrator to log in to all network systems to perform maintenance without needing to know the power-on password. Establishing a setup password using Computer Setup (F10) Utility Establishing a setup password through the Computer Setup (F10) Utility prevents reconfiguration of the computer (through the use of Computer Setup (F10) Utility) until the password is entered. To establish a setup password using the Computer Setup (F10) Utility menu: 1. Turn on or restart the computer. 2. As soon as the computer is turned on, repeatedly press the F10 key until you enter Computer Setup (F10) Utility. If you do not press F10 at the appropriate time, you must restart the computer, and then repeatedly press F10 to access the utility. 3. Select Security and then select Set up BIOS Administrator Password. Follow the onscreen instructions. 4. Before exiting, select Main and then select Save Changes and Exit. Establishing a power-on password using computer setup Establishing a power-on password through Computer Setup (F10) Utility prevents access to the computer when power is connected, unless you specify the password. When a power-on password is set, Computer Setup (F10) Utility presents Password Options in the Security menu. The password options include Network Server Mode and Password Prompt on Warm Boot. When Network Server Mode is disabled, you must enter the password when the computer is turned on and the key icon appears on the monitor. When Password Prompt on Warm Boot is enabled, you must enter the password. The password must also be entered each time the computer is restarted. When Network Server Mode is enabled, the password prompt is not presented during POST. To enable Network Server Mode, you must set a power-on password under Advanced > Password Options. This option enables the computer to start without requiring the power-on password, but the keyboard and mouse are locked until you enter the password. To establish a power-on password through the Computer (F10) menu: Desktop management 39

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133

In a single-drive computer, when DriveLock is enabled, the computer might not be able to boot to the
operating system, and might try to boot from the network or from another storage device (depending
on the boot ordering options). Regardless of the outcome of the start attempts, the locked drive remains
inaccessible without the DriveLock password.
In a two-drive computer that has a boot drive and a data drive, you can apply the DriveLock feature to
the data drive only. In this case, the computer can always start, but the data drive is accessible only
when the DriveLock password is entered.
Cold starts require that you enter DriveLock passwords. However, DriveLock passwords are also required
for warm starts. For example, if you boot to DOS and press
Ctrl+Alt+Del
, you must enter the DriveLock
password before the computer completes the next start cycle. This warm-start behavior is consistent
with the DriveLock feature.
Password security
The power-on password prevents unauthorized access to applications or data when the computer is turned
on or restarted. The setup password
specifically
prevents unauthorized access to the Computer Setup (F10)
Utility and can also be used as an override to the power-on password. An administrator can enter the setup
password at the prompt for the power-on password and gain access to the computer.
You can establish a network-wide setup password to enable the system administrator to log in to all network
systems to perform maintenance without needing to know the power-on password.
Establishing a setup password using Computer Setup (F10) Utility
Establishing a setup password through the Computer Setup (F10) Utility prevents
reconfiguration
of the
computer (through the use of Computer Setup (F10) Utility) until the password is entered.
To establish a setup password using the Computer Setup (F10) Utility menu:
1.
Turn on or restart the computer.
2.
As soon as the computer is turned on, repeatedly press the
F10
key until you enter Computer Setup
(F10) Utility.
If you do not press
F10
at the appropriate time, you must restart the computer, and then repeatedly
press
F10
to access the utility.
3.
Select
Security
and then select
Set up BIOS Administrator Password
. Follow the onscreen instructions.
4.
Before exiting, select
Main
and then select
Save Changes and Exit
.
Establishing a power-on password using computer setup
Establishing a power-on password through Computer Setup (F10) Utility prevents access to the computer
when power is connected, unless you specify the password. When a power-on password is set, Computer
Setup (F10) Utility presents Password Options in the Security menu. The password options include Network
Server Mode and Password Prompt on Warm Boot.
When Network Server Mode is disabled, you must enter the password when the computer is turned on and the
key icon appears on the monitor. When Password Prompt on Warm Boot is enabled, you must enter the
password. The password must also be entered each time the computer is restarted. When Network Server
Mode is enabled, the password prompt is not presented during POST.
To enable Network Server Mode, you must set a power-on password under
Advanced > Password Options
.
This option enables the computer to start without requiring the power-on password, but the keyboard and
mouse are locked until you enter the password.
To establish a power-on password through the Computer (F10) menu:
Desktop management
39