System Overview 1-15Summary of Software Security FeaturesThe Table 1-1 lists the software security features and describes what protection eachoffers. In general, to enable or set the features listed here, you must run BIOS Setup andgo to the Security Subsystem Group, menu.Table 1-1. Software Security FeaturesFeature DescriptionSecure mode How to enter secure mode:Setting and enabling passwords automatically places the system insecure mode.If you set a hot-key combination (through Setup), you can secure thesystem simply by pressing the key combination. This means you do nothave to wait for the inactivity time-out period.When the system is in secure mode:The server can boot and run the operating system, but mouse andkeyboard input is not accepted until the user password is entered.At boot time, if a CD is detected in the CD-ROM drive or a diskette indrive A, the system prompts for a password. When the password isentered, the server boots from CD or diskette and disables the securemode.If there is no CD in the CD-ROM drive or diskette in drive A, the serverboots from drive C and automatically goes into secure mode. All enabledsecure mode features go into effect at boot time.To leave secure mode: Enter the correct password(s).Disable writing todisketteIn secure mode, the server will not boot from or write to a diskette unlessa password is entered.To write protect access to diskette whether the server is in secure modeor not, use the Setup main menu, Floppy Options, and specify FloppyAccess as read only.Set a time outperiod so thatkeyboard andmouse input are notaccepted.Also, screen can beblanked, and writesto diskette can beinhibitedSpecify and enable an inactivity time out period of from 1 to 120 minutes.If no keyboard or mouse action occurs for the specified period, attemptedkeyboard and mouse input will not be accepted.The monitor display will go blank, and the diskette drive will be writeprotected (if these security features are enabled through Setup).To resume activity: Enter the correct password(s).Control access tousing the BIOSSetup: setsupervisorpasswordTo control access to setting or changing the system configuration, set asupervisor password and enable it through Setup.If both the supervisor and user passwords are enabled, either can beused to boot the server or enable the keyboard and/or mouse, but onlythe supervisor password will allow Setup to be changed.To disable a password, change it to a blank entry or press CTRL-D in theChange Password menu of the Supervisor Password Option menu foundin the Security Subsystem Group.To clear the password if you cannot access Setup, change the ClearPassword jumper (see Chapter 3).
