IBM 865511Y Hardware Maintenance Manual - Page 52

Enhanced security can be enabled or disabled only when you update system programs. The procedure for enabling enhanced security is explained under "Enabling and disabling enhanced security" on page 45. If enhanced security is enabled and you have not set an administrator password, your server will operate as if enhanced security were disabled. If enhanced security is enabled and you have set an administrator password, your server will operate as follows: The contents of the security EEPROM (your administrator password and startup sequence) will be protected from failure of the battery and CMOS memory. The security EEPROM will be protected from unauthorized access because it locks after your server is turned on and the system programs have completed their startup routine. Once it is locked, the security EEPROM cannot be read from or written to by any software application or system software until the server is turned off and back on again. In a networking environment, this might prevent certain functions from being performed remotely on your server. There is an extra measure of protection for the system programs in your server. Normally, the entire contents of the system programs EEPROM is write protected with a soft lock. A soft lock allows the POST/BIOS update utility to function in a network environment. Enhanced security adds a hard lock. With a hard lock, when your server is turned on and the system programs startup routine is completed, the POST/BIOS update utility is locked and cannot be unlocked until the server is turned off and back on again and the administrator password is entered. Note that in a networking environment this prevents the system programs in your server from being updated remotely. Someone must be present at your server to turn it on and off in order to unlock the POST/BIOS update utility. A chassis-intrusion feature will alert you if the cover of your server has been removed. This feature will work if your server is on or off when the cover is removed. If the cover has been removed, a prompt for your administrator password will appear on the screen, and your server will remain in a halted state until your administrator password is entered. As with nonenhanced security, your configuration settings are protected. The settings cannot be changed in the Configuration/Setup Utility program until your administrator password is entered. This means that any changes in server hardware that are detected by the system programs in your server, such as removal of a memory DIMM, will generate a 44 Netfinity Server HMM