Security
User Guide
© Copyright 2009 Hewlett-Packard
Development Company, L.P.
The information contained herein is subject
to change without notice. The only
warranties for HP products and services are
set forth in the express warranty statements
accompanying such products and services.
Nothing herein should be construed as
constituting an additional warranty. HP shall
not be liable for technical or editorial errors
or omissions contained herein.
First Edition: June 2009
Document Part Number: 535350-001
Product notice
This user guide describes features that are
common to most models. Some features
may not be available on your computer.
Table of contents
1 Protecting the computer
2 Using passwords
Setting passwords in the operating system .......................................................................................... 3
Setting passwords in Computer Setup ................................................................................................. 4
Setup password .................................................................................................................................... 5
Managing a setup password ................................................................................................ 6
Entering a setup password .................................................................................................. 7
Power-on password .............................................................................................................................. 8
Managing a power-on password .......................................................................................... 9
Entering a power-on password .......................................................................................... 10
Requiring a power-on password at restart ......................................................................... 11
Using Computer Setup DriveLock ...................................................................................................... 12
Setting a DriveLock password ........................................................................................... 13
Entering a DriveLock password ......................................................................................... 14
Changing a DriveLock password ....................................................................................... 15
Removing DriveLock protection ......................................................................................... 16
3 Using Computer Setup security features
Securing system devices .................................................................................................................... 17
Using Computer Setup stringent security ........................................................................................... 18
Setting stringent security ................................................................................................... 19
Removing stringent security .............................................................................................. 20
Viewing Computer Setup System Information .................................................................................... 21
4 Using antivirus software
5 Using firewall software
6 Setting up automatic online updates
7 Installing a security cable
Index ................................................................................................................................................................... 26
iii
iv
1 Protecting the computer
NOTE: Security solutions are designed to act as deterrents. These deterrents may not prevent a
product from being mishandled or stolen.
Security features provided with your computer can protect the computer, personal information, and data
from a variety of risks. The way you use your computer will determine which security features you need
to use.
The operating system offers certain security features. Additional security features are listed in the
following table. Most of these additional security features can be configured in the Computer Setup utility
(referred to hereafter as Computer Setup).
To protect against Use this security feature
Unauthorized use of the computer Power-on authentication using passwords or smart cards
Unauthorized access to Computer Setup (f10) Setup password in Computer Setup*
Unauthorized access to the contents of a hard drive DriveLock password in Computer Setup*
Unauthorized reset of Computer Setup (f10) passwords Stringent security feature in Computer Setup*
Unauthorized startup from an optical drive, diskette drive, or
internal network adapter
Boot options feature in Computer Setup*
Unauthorized access to data
●
Firewall software
●
Operating system updates
Unauthorized access to Computer Setup settings and other
system identification information
Setup password in Computer Setup*
Unauthorized removal of the computer Security cable slot (used with an optional security cable)
*Computer Setup is a utility accessed by pressing f10 when the computer is turned on or restarted. When using Computer
Setup, you must use the keys on your computer to navigate and make selections.
1
2 Using passwords
Most security features use passwords. Whenever you set a password, write down the password and
store it in a secure location away from the computer. Note the following password considerations:
●
Setup, power-on, and DriveLock passwords are set in Computer Setup and are managed by the
system BIOS.
●
The embedded security password can be enabled in Computer Setup to provide BIOS password
protection. The embedded security password is used with the optional embedded security chip.
●
Operating system passwords are set only in the operating system.
●
If you forget the setup password set in Computer Setup, you will not be able to access the utility.
●
If you have the stringent security feature enabled in Computer Setup and you forget the setup
password or the power-on password, the computer is inaccessible and can no longer be used. Call
technical support or your authorized service provider for additional information.
●
If you forget both the power-on password and the setup password set in Computer Setup, you
cannot turn on the computer or exit Hibernation. Call technical support or your authorized service
provider for additional information.
●
If you forget both the user password and the master DriveLock password set in Computer Setup,
the hard drive that is protected by the passwords is permanently locked and can no longer be used.
You can use the same password for a Computer Setup feature and for an operating system security
feature. You can also use the same password for more than one Computer Setup feature.
Use the following tips for creating and saving passwords:
●
When creating passwords, follow requirements set by the program.
●
Write down your passwords and store them in a secure place away from the computer.
●
Do not store passwords in a file on the computer.
The following tables list commonly used operating system and Computer Setup passwords and describe
their functions.
2 Chapter 2 Using passwords
Setting passwords in the operating system
Operating system passwords Function
Root password Protects access to an operating system root-level account.
User password Protects access to an operating system user account.
Setting passwords in the operating system 3
Setting passwords in Computer Setup
Computer Setup passwords Function
Setup password Protects access to Computer Setup.
Power-on password Protects access to the computer contents when the computer
turns on, restarts, or exits Hibernation.
DriveLock master password Protects access to the internal hard drive that is protected by
DriveLock. It is also used to remove DriveLock protection. This
password is set under DriveLock Passwords during the enable
process.
DriveLock user password Protects access to the internal hard drive that is protected by
DriveLock, and is set under DriveLock Passwords during the
enable process.
4 Chapter 2 Using passwords
Setup password
The Computer Setup setup password protects the configuration settings and system identification
information in Computer Setup. After this password is set, it must be entered to access Computer Setup
and to make changes using Computer Setup.
Note the following characteristics of the setup password:
●
It is not interchangeable with an operating system root password, although both passwords can
be identical.
●
It is not displayed as it is set, entered, changed, or deleted.
●
It must be set and entered with the same keys. For example, a setup password set with keyboard
number keys will not be recognized if you enter it thereafter with embedded numeric keypad number
keys.
●
It can include any combination of up to 32 letters and numbers and is not case sensitive.
Setup password 5
Managing a setup password
A setup password is set, changed, and deleted in Computer Setup.
To manage, set, change, or delete this password, follow these steps:
1. Open Computer Setup by turning on or restarting the computer, and then pressing f10 while the
“F10 = ROM Based Setup” message is displayed in the lower-left corner of the screen.
2. Use the arrow keys to select Security > Setup Password, and then press enter.
●
To set a setup password, type your password in the New password and Verify new
password fields, and then press f10.
●
To change a setup password, type your current password in the Old password field, type a
new password in the New password and Verify new password fields, and then press f10.
●
To delete a setup password, type your current password in the Old password field, and then
press f10.
3. To save your preferences, use the arrow keys to select File > Save changes and exit. Then follow
the instructions on the screen.
Your preferences go into effect when the computer restarts.
6 Chapter 2 Using passwords