HP Z600 HP Z600 Workstation Maintenance and Service Guide - Page 63

Table 4-2 Security features overview Feature Purpose How it is established Removable Media Boot Control Prevents booting from removable media drives From the Computer Setup (F10) Utility menu Serial, Parallel, USB, or Infrared Prevents transfer of data through the Interface Control integrated serial, parallel, USB, or infrared interface From the Computer Setup (F10) Utility menu Power-On Password Prevents use of the workstation until the From the Computer Setup (F10) password is entered (applies to initial system Utility menu startup and restarts) Setup Password Prevents reconfiguration of the workstation From the Computer Setup (F10) (use of the Setup utility) until the password is Utility menu entered Network Server Mode Provides unique security features for workstations used as servers From the Computer Setup (F10) Utility menu SATA hard disk drive security HP workstations include the HP DriveLock facility for SATA hard disk drives to prevent unauthorized access to data. WARNING! Enabling DriveLock can render a SATA hard disk drive permanently inaccessible if the master password is lost or forgotten. No method exists to recover the password or access the data. DriveLock has been implemented as an extension to Computer Setup (F10) functions. It is only available when hard disk drives that support the ATA security command set are detected. On HP workstations, it is not available when the SATA emulation mode is RAID+AHCI or RAID. DriveLock is for HP customers for whom data security is a paramount concern. For such customers, the cost of a hard disk drive and the loss of the data stored on it is inconsequential when compared to the damage that could result from unauthorized access to its contents. To balance this level of security with the need to address the issue of a forgotten password, the HP implementation of DriveLock employs a two-password security scheme. One password is intended to be set and used by a system administrator, while the other is typically set and used by the user. No "back door" can be used to unlock the drive if both passwords are lost. Therefore, DriveLock is most safely used when the data contained on the hard disk drive is replicated on a corporate information system or is regularly backed up. If both DriveLock passwords are lost, the hard disk drive is rendered unusable. For users who do not fit the previously defined customer profile, this might not be acceptable. For users who fit this profile, it might be a tolerable risk, given the nature of the data stored on the hard disk drive. ENWW Workstation management 51