HP Z840 Maintenance and Service Guide - Page 48

Using DriveLock, Security, DriveLock Security, Enable, Master, Enter New Password Again

Get HP Z840 PDF manuals and user guides View all HP Z840 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 48 highlights

Access to Computer Setup (F10) Utility and DriveLock can be restricted through the setup password. By specifying a setup password and not giving it to users, system administrators can restrict users from enabling DriveLock. Using DriveLock When hard drives that support the ATA security command set are detected, DriveLock appears under the Security menu in the Computer Setup (F10) Utility menu. You are presented with options to set the master password and to enable DriveLock. You must provide a user password to enable DriveLock. Because the initial configuration of DriveLock is typically performed by a system administrator, a master password should be set first. HP encourages system administrators to set a master password whether they plan to enable DriveLock or not. This gives the administrator the ability to modify DriveLock settings if the drive is locked in the future. After the master password is set, the system administrator can enable DriveLock or leave it disabled. If a locked hard drive is present, POST requires a password to unlock the device. If a power-on password is set and it matches the device's user password, POST does not prompt the user to re-enter the password. Otherwise, the user is prompted to enter a DriveLock password. For a cold start, use the master or user password. For a warm start, enter the same password used to unlock the drive during the preceding cold start. Users have two attempts to enter a correct password. During cold start, if neither attempt succeeds, POST continues but the drive remains inaccessible. During a warm-start or restart from Windows, if neither attempt succeeds, POST halts and the user is instructed to cycle power. Enabling DriveLock To enable and set the DriveLock user password: 1. Turn on or restart the computer. 2. As soon as the computer is turned on, repeatedly press the F10 key until Computer Setup (F10) Utility starts. If you do not press F10 at the appropriate time, you must restart the computer, and then repeatedly press F10 to access the utility. 3. Select Security and then select DriveLock Security. 4. For each DriveLock-capable drive, select the drive by pressing Enter. 5. Under Enable/Disable DriveLock options, select Enable, and then press Enter to enable DriveLock for that drive. NOTE: To set the DriveLock master password, select Master. CAUTION: If you forget the DriveLock password, the drive is inaccessible. 6. Enter a new user password (1 to 32 characters long), and then press Enter to accept. 7. Enter the password again in the Enter New Password Again field. If you forget this password, the drive is permanently disabled. 8. Select Main and then select Save Changes and Exit. Press Enter to accept the changes. After you press Enter, the computer performs a cold start before invoking the DriveLock function. When the computer starts, you are prompted to enter the DriveLock password for each DriveLockcapable drive for which you have set a password. You have two attempts to enter the password correctly. If the password is not entered correctly, the computer attempts to start anyway. However, the boot process most likely fails because data from a locked drive cannot be accessed. 38 Chapter 2 System management

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
Access to Computer Setup (F10) Utility and DriveLock can be restricted through the setup password. By
specifying a setup password and not giving it to users, system administrators can restrict users from enabling
DriveLock.
Using DriveLock
When hard drives that support the ATA security command set are detected, DriveLock appears under the
Security menu in the Computer Setup (F10) Utility menu. You are presented with options to set the master
password and to enable DriveLock. You must provide a user password to enable DriveLock. Because the initial
configuration
of DriveLock is typically performed by a system administrator, a master password should be set
first.
HP encourages system administrators to set a master password whether they plan to enable DriveLock or
not. This gives the administrator the ability to modify DriveLock settings if the drive is locked in the future.
After the master password is set, the system administrator can enable DriveLock or leave it disabled.
If a locked hard drive is present, POST requires a password to unlock the device. If a power-on password is set
and it matches the device’s user password, POST does not prompt the user to re-enter the password.
Otherwise, the user is prompted to enter a DriveLock password.
For a cold start, use the master or user password. For a warm start, enter the same password used to unlock
the drive during the preceding cold start.
Users have two attempts to enter a correct password. During cold start, if neither attempt succeeds, POST
continues but the drive remains inaccessible. During a warm-start or restart from Windows, if neither attempt
succeeds, POST halts and the user is instructed to cycle power.
Enabling DriveLock
To enable and set the DriveLock user password:
1.
Turn on or restart the computer.
2.
As soon as the computer is turned on, repeatedly press the
F10
key until Computer Setup (F10) Utility
starts.
If you do not press
F10
at the appropriate time, you must restart the computer, and then repeatedly
press
F10
to access the utility.
3.
Select
Security
and then select
DriveLock Security
.
4.
For each DriveLock-capable drive, select the drive by pressing
Enter
.
5.
Under Enable/Disable DriveLock options, select
Enable
, and then press
Enter
to enable DriveLock for
that drive.
NOTE:
To set the DriveLock master password, select
Master
.
CAUTION:
If you forget the DriveLock password, the drive is inaccessible.
6.
Enter a new user password (1 to 32 characters long), and then press
Enter
to accept.
7.
Enter the password again in the
Enter New Password Again
field.
If you forget this password, the drive
is permanently disabled.
8.
Select
Main
and then select
Save Changes and Exit
. Press
Enter
to accept the changes. After you press
Enter
, the computer performs a cold start before invoking the DriveLock function.
When the computer starts, you are prompted to enter the DriveLock password for each DriveLock-
capable drive for which you have set a password. You have two attempts to enter the password
correctly. If the password is not entered correctly, the computer attempts to start anyway. However, the
boot process most likely fails because data from a locked drive cannot be accessed.
38
Chapter 2
System management