Intel Corporation (Intel) makes no warranty of any kind with regard to this material, including, but not limited to, the implied
warranties of merchantability and fitness for a particular purpose. Intel assumes no responsibility for any errors that may
appear in this document. Intel makes no commitment to update nor to keep current the information contained in this
document. No part of this document may be copied or reproduced in any form or by any means without prior written
consent of Intel.
An Intel product, when used in accordance with its associated documentation, is "Year 2000 Capable" when, upon
installation, it accurately stores, displays, processes, provides, and/or receives date data from, into, and between the
twentieth and twenty-first centuries, including leap year calculations, provided that all other technology used in combination
with said product properly exchanges date data with it.
†
Third party brands and names are the property of their respective owners.
1Chassis Description
2Baseboard Description
3Configuration Software and Utilities
4Exchanging SCSI Hard Drives and Power Supplies
9
blank page
10
1Chassis Description
The SC450NX MP server is designed to either stand upright (pedestal mode) or be mounted in a
rack (rack mode). Figures 1 and 2 show examples of these configurations. Before operation, you
must purchase an adapter kit to configure the server for one of the two modes. If you have already
created a pedestal server but now want to install it in a rack, you will also need an adapter kit.
If you have not already purchased a kit for your particular task, contact your customer service
representative for details. For instructions on mounting your server, see the printed
SC450NX MP Server System Rack/Pedestal Kit Installation Guide accompanying your kit.
Table 1.SC450NX MP Server Physical Specifications
SpecificationPedestal ModeRack Mode
Height48.26 cm (19 inches)7u
Width31.12 cm (12.25 inches)19 inch rack
Depth63.5 cm (25 inches)25 inches
Weight38.25 kg (85 lbs) minimum configuration
45 kg (100 lbs) maximum configuration
Required front
clearance
Required rear
clearance
Required side
clearance
10 inches (inlet airflow <35 °C / 95 °F)10 inches (inlet airflow <35 °C / 95 °F)
8 inches (no airflow restriction)8 inches (no airflow restriction)
0.0 inches (additional side clearance
required for service)
38.25 kg (85 lbs) minimum
configuration
45 kg (100 lbs) maximum configuration
N/A
Figure 1. Equipment Rack with Three ServersFigure 2. Single Server in Pedestal Mode
OM08045
OM08000
11
Chassis Feature Summary
The system’s galvanized metal chassis minimizes EMI and radio frequency interference (RFI).
The removable access cover is attached to the chassis with two screws. A front subchassis and an
electronics bay (at the rear of the main chassis) both rotate outward and can be removed entirely to
provide easy access to internal components. The removable front panel provides access to the
3.5- and 5.25-inch peripheral bays in the front of the chassis.
Table 2.Chassis Feature Summary
FeatureDescription
DrivesInstalled:
1.44 MB, 3.5-inch diskette drive, accessible from front subchassis.
Expansion capacity:
Three 5.25-inch-wide bays that are externally accessible, designed to hold
half-height standard removable media devices; the bays can be converted
into a single full-height bay.
Also, one externally accessible bay can hold up to six one-inch drives with an
optional SCSI backplane, or up to two drives without the backplane.
Expansion slot coversUp to eight slot covers can be used; every slot opening that does not have an
add-in board installed must have a slot cover installed.
BaseboardForm-factor, 16 × 13 inches, ATX I/O.
Power supplyUp to three 400-watt power supplies with integrated cooling fans and
detachable AC power cords.
CoolingUp to 11 fans provide cooling and airflow: three system fans inside the
chassis (and three more needed only for redundant cooling), one fan for each
power supply (up to three), and two fans for cooling hard drives.
12
Chassis Front Controls and Indicators
L
K
ABC
D
E
F
G
H
I
J
OM08001
Figure 3. Front Controls and Indicators
A. External drive bay (5¼”); CD-ROM drive shown installed (not included)
B. Diskette drive
C. Power On/Off button (holding down this button for more than four seconds causes a
power-button override to the PIIX4E when you release the button)
D. Sleep/Service button (holding down this button for LESS THAN four seconds enters sleep
mode, which requires an ACPI-compliant OS; holding it down for MORE THAN four seconds
enters service mode, which powers down the electronics bay but leaves hot-swap and
peripheral bays running)
E. Reset button
F. Front panel LEDs (Top to bottom: top five are power on, disk bay power on, HDU activity, fan
failure, power supply failure; bottom six are hard-drive activity LEDs, labeled 0-5)
G. NMI button
H. System security lock
I. EMI shield lock
J. Internal drive bays (3½”). Five are shown installed, but maximum capacity is six.
K. Metal EMI shield
L. Expansion drive bay (5¼”)
13
Chassis Back Controls and Features
H
A
C
B
D
I
J
E
F
K
G
Figure 4. Back Controls and Indicators
A. Parallel port
B. VGA† monitor connector
C. Serial port A, COM1
D. Serial port B, COM2
E. Mouse connector
F. Keyboard connector
G. Universal serial bus connector
H. Expansion slot covers (six slot connectors provided on baseboard)
I. Power supply bay
J. AC input power connector
K. Power supply fan
L. Power supply LED
M. Power supply failure LED (LED not lit means failure)
M
L
OM08002
14
Chassis Side View
A
B
C
D
EF
G
H
I
JLK
Figure 5. Chassis Side View
A. Front swing-out subchassis
B. Diskette drive
C. Main chassis
D. Power backplane
E. Power supply(s)
F. Baseboard
G. Lift-out electronics bay
H. 5.25” device bay
I. SCSI hard drive bay
J. Foam cover
K. Foam fan housing
L. Foam fan housing cover
OM08017
15
Peripherals
3.5-inch Diskette Drive
The 3.5-inch diskette drive in the 3.5-inch peripheral bay supports 720 KB, and 1.44 MB media.
The drive is externally accessible from the front of the system.
3.5-inch Hard Drive Bays
The chassis contains one bay for two 3.5-inch-wide (1" high or 1-5/8" high) LVDS SCSI hard
drives with internal cabling. An optional hot-swap-capable backplane can accommodate six
3.5-inch-wide (1" high) or three 3.5-inch (1-7/8" high) hard drives, which are accessed externally
from the front of the system. To upgrade to a backplane, or to upgrade your existing backplane,
you must buy a kit.
As part of the hot-swap implementation, a drive carrier is required. The drives are mounted in the
carrier with four fasteners and the carrier snaps into the chassis. Drives whose power exceeds 15
watts require heatsinks and system fans for extra cooling. These parts are available in an optional
kit.
• For information on how and when to install heatsinks, see “Installing Heatsinks on High-
Power Drives” on page 82.
• For information on how and when to install extra fans, see “Installing Fans for High-Power
Drives” on page 106.
A single metal EMI shield and plastic door cover the drive bays. A hot-docking bay is provided
for drives that are 3.5 inches wide and 1 inch high. Drives can consume up to 22 watts of power
and must be specified to run at a maximum ambient temperature of 55 °C.
The system was designed to allow the user to install a Redundant Array of Independent Disks
(RAID). A software implementation with onboard SCSI or an add-in board can be used to set up
RAID applications.
5.25-inch Removable Media Device Bays
The chassis has three 5.25-inch half-height bays that are accessible from the front of the system.
These bays are intended to provide space for tape backup or other removable devices.
You can convert the 5.25-inch bays to a single full-height bay. We recommend that you do not use
these bays for hard disk drives, because they generate EMI (increasing ESD susceptibility), and
because of inadequate cooling.
16
Power Supplies
The chassis can be configured with one, two, or three 400-watt power supplies, each designed to
minimize EMI and RFI. Each supply operates within the following voltage ranges and is rated as
follows:
• 100-120 V∼ at 50/60 Hertz (Hz); 7.6 A maximum
• 200-240 V∼ at 50/60 Hz; 3.8 A maximum
The DC output voltages of each power supply are:
• +3.3 V at 36 A max
• +5 V at 24 A max (total combined output of +3.3 V and +5.5 V not to exceed 195 W)
• +12 V at 18.0 A with 19.0 A <10ms peak
• +24 V at 50mA
• -12 V at 0.5 A
• +5 V standby 1.5 A
Power is sourced through the power cable to the 20-pin main connectors on the baseboard.
Remote sensing signals are provided through the cable to the 14-pin auxiliary connector on the
baseboard.
System Cooling
The minimum chassis configuration includes three fans for cooling and airflow (and can accept up
to five more). The number of additional fans depends on your configuration: one fan for each
power supply (up to three) and two fans for cooling hard drives.
NOTE
✏
The access cover must be on the system for proper cooling.
Chassis Security
For information on security features on the SC450NX MP server, see “System Security” on
page 28.
17
Blank page
18
2Baseboard Description
Baseboard Features
Table 3.Baseboard Features
FeatureDescription
ProcessorInstalled: Up to four Pentium® II Xeon™ processors, packaged in single edge
contact (S.E.C.) cartridges and installed in 330-pin Slot 2 processor
connectors, operating at 1.8 V to 3.5 V. The baseboard's voltage regulator is
automatically programmed by the processor's VID pins to provide the required
voltage.
Includes connectors for six VRM 8.3-compliant plug-in voltage-regulator
modules.
Memory, dynamic
random access (DRAM)
Video memory (DRAM)Installed: 2 MB of video memory.
PCI Segment A bus
PCI Segment B bus
ISA busOne expansion slot for add-in boards (shared with a PCI-B slot). Embedded
Server ManagementThermal/voltage monitoring and error handling.
GraphicsIntegrated onboard Cirrus Logic GD5480 super video graphics array
SCSITwo embedded SCSI controllers:
System I/OPS/2†-compatible keyboard and mouse ports, 6-pin DIN.
Form FactorForm-factor, 13 × 16 inches, ATX I/O.
Single plug-in module containing 64/72-bit four-way-interleaved pathway to
main memory supporting EDO DRAM.
Installed: 128 MB to 4 GB of error correcting code (ECC) memory.
PCI-A—
PCI-B—
and one embedded device:
PC-compatible support (serial, parallel, mouse, keyboard, diskette).
Front panel controls and indicators (LEDs).
(SVGA) controller.
Symbios SYM53C810AE—
support for the legacy 8-bit SCSI devices in the 5.25-inch drive bays.
Symbios SYM53C896—
SCSI controller on PCI-B bus driving one SCSI backplane in the system and
providing support for external expansion.
Advanced parallel port, supporting Enhanced Parallel Port (EPP) levels 1.7
and 1.9, ECP, compatible 25-pin.
VGA video port,15-pin.
Two serial ports, 9-pin (serial port A is the top connector).
Three expansion connectors and four embedded devices:
• Programmable interrupt device (PID)
• PCI/ISA/IDE Accelerator (PIIX4E) for PCI-to-ISA bridge, PCI IDE
interface, and Universal Serial Bus (USB) controller
• PCI video controller (Cirrus Logic GD5480)
• PCI narrow SCSI controller (Symbios
Four expansion connectors (one physically shared with the ISA slot)
• Wide Ultra/Ultra II SCSI controller (Symbios SYM53C896)
†
SYM53C810AE)
narrow SCSI controller on PCI-A bus providing
dual-channel wide LVD/SE (Ultra2/Ultra)
19
Baseboard Connector and Component Locations
C DAEFB
MM
LL
KK
JJ
II
HH
GG
FF
EE
DD
CC
BB
AA
Z
Y
X
W
V
Figure 6. Baseboard Connector and Component Locations
A. Wide SCSI B connector (J9J1)U. VRM connector for processor 1 (J4A1)
B. System jumpers (J6J1)V. Processor 1 Slot 2 connector (J9A1)
C. Hard drive input LED connector (J6J3)W. Main power connector, primary (J9B1)
D. System speaker connector (J6J2)X. Processor 2 Slot 2 connector (J9B2)
E. Lithium battery (B4H1)Y. Processor 3 Slot 2 connector (J9D1)
F. Wake on LAN† technology connector (J4H1)Z. Main power connector, secondary (J9D2)
G. ISA slot (J1J1)AA. Front panel connector (J8E1)
H. PCI slots B4 (closest to ISA), B3, B2, B1, A3,
and A2 (farthest from ISA)
I. Memory module connector (J3G1)CC. IDE connector (J9E2)
J. ICMB connector (J1E1)DD. Diskette drive connector (J9E3)
K. PCI slot A1 (J2D1)EE. Auxiliary power connector (J9E4)
L. Video and parallel port connectors (J1C1)FF. USB internal header (JC9F14)
M. Serial port connector (J1B2)GG. SMBus connector (J9F2)
N. Keyboard and mouse connectors (J1B1)HH. F16 expansion connector (J7G1)
O. USB external connector (J1A1)II. ITP connector (J6G1)
P. VRM connector for processor 4 (J4E1)JJ. Narrow SCSI connector (J9H1)
Q. VRM connector for processors 4 and 3 (J4C2)KK. External IPMB connector (J7H1)
R. VRM connector for processor 3 (J4C1)LL. SMM connector (J8H1)
S. VRM connector for processor 2 (J4B1)MM. Wide SCSI A connector (J9H2)
T. VRM connector for processors 2 and 1 (J4A2)
BB. Processor 4 Slot 2 connector (J9E1)
P
Q
R
S
T
U
G
H
I
J
K
L
M
N
O
OM08022
20
Processor
Each Pentium II Xeon processor is packaged in a single edge contact (S.E.C.) cartridge. The
cartridge includes the processor core with an integrated 16 KB primary (L1) cache; the secondary
(L2) cache; a thermal plate; and a back cover.
™
The processor implements the MMX
™
the 8086, 80286, Intel386
, Intel486™, Pentium, and Pentium Pro processors. The processor's
numeric coprocessor significantly increases the speed of floating-point operations and complies
with ANSI/IEEE standard 754-1985.
Each S.E.C. cartridge connects to the baseboard through a 330-pin Slot 2 edge connector. The
cartridge is secured by a retention module attached to the baseboard. Depending on configuration,
your system has one to four processors.
The processor external interface is MP-ready and operates at 100 MHz. The processor contains a
local APIC unit for interrupt handling in multiprocessor (MP) and uniprocessor
(UP) environments.
The L2 cache is located on the substrate of the S.E.C. cartridge. The cache:
• Includes burst pipelined synchronous static RAM (BSRAM)
• Is offered in 512 KB, 1 MB, and 2 MB configurations
• Has ECC
• Operates at the full core clock rate
technology and maintains full backward compatibility with
21
Memory
Main memory resides on an add-in board, called a memory module, designed specifically for the
SC450NX MP server. The memory module contains slots for 16 DIMMs, each of which must be
at least 32 MB, and is attached to the baseboard through a 242-pin connector. Memory amounts
from 128 MB to 4 GB of DIMM are supported, with a 64/72-bit four-way-interleaved pathway to
main memory, which is also located on the module. The 16 slots are divided into four banks of
four slots each, labeled A through D. These banks support 4:1 interleaving. The memory
controller supports EDO DRAMs. The ECC used for the memory module is capable of correcting
single-bit errors (SBEs) and detecting 100 percent of double-bit errors over one code word. Nibble
error detection is also provided.
A. Memory bank A (install first)
B. Memory bank B (install second)
C. Memory bank C (install third)
D. Memory bank D (install last)
E. Memory module connector
22
System memory begins at address 0 and is continuous (flat addressing) up to the maximum amount
of DRAM installed (exception: system memory is noncontiguous in the ranges defined as memory
holes using configuration registers). The system supports both base (conventional) and extended
memory.
• Base memory is located at addresses 00000h to 9FFFFh (the first 1 MB).
• Extended memory begins at address 0100000h (1 MB) and extends to FFFFFFFFh (4 GB),
which is the limit of supported addressable memory. The top of physical memory is a
maximum of 4 GB (to FFFFFFFFh).
NOTE
✏
Addressable memory can be extended to 64 GB under certain
configurations, but this server is configured to support 4 GB.
Some OSs and application programs use base memory while others use both conventional and
extended memory. Examples:
• Base memory: MS-DOS
†
, OS/2†, Windows NT†, and UNIX
†
• Conventional and extended memory: OS/2, Windows NT, and UNIX
MS-DOS does not use extended memory; however, some MS-DOS utility programs like RAM
disks, disk caches, print spoolers, and windowing environments use extended memory for better
performance.
BIOS automatically detects, sizes, and initializes the memory array, depending on the type, size,
and speed of the installed DIMMs, and reports memory size and allocation to the system via
configuration registers.
In a 4 GB configuration, a small part of memory (typically 32 MB) is not remapped above 4 GB.
If your OS does not support more than 4 GB of physical memory, this small part of the memory is
effectively lost.
NOTE
✏
DIMM sizes and compatibility: use DIMMs that have been tested for
compatibility with the baseboard. Contact your sales representative or
dealer for a list of approved DIMMs. The table below lists some sample size
combinations.
The 87309 device supports two serial ports, one parallel port, diskette drive, and PS/2-compatible
keyboard and mouse. The system provides the connector interface for each port.
Serial Ports
Both serial ports are relocatable. By default, port A is physically the top connector, port B on the
bottom. Each serial port can be set to one of four different COMx ports, and each can be enabled
separately. When enabled, each port can be programmed to generate edge- or level-sensitive
interrupts. When disabled, serial port interrupts are available to add-in boards.
Parallel Port
The 25/15-pin connector stacks the parallel port over the VGA. The 87309 provides one
IEEE 1284-compatible 25-pin bidirectional EPP (supporting levels 1.7 and 1.9). BIOS
programming of the 87309 registers enables the parallel port and determines the port address and
interrupt. When disabled, the interrupt is available to add-in boards.
Add-in Board Slots
The baseboard has one ISA slot that is full-length if the wide SCSI-B slot is not used (and halflength if the wide SCSI-B slot is used); the ISA slot supports slave-only boards and is shared with
PCI-B slot 4. The ISA has three embedded devices: the Super I/O chip, Baseboard Management
Controller (BMC), and flash memory for system BIOS. ISA features:
• Bus speed up to 8.33 MHz
• 16-bit memory addressing
• Type A transfers at 5.33 MB/sec
• Type B transfers at 8 MB/sec
• 8- or 16-bit data transfers
• Plug and Play ready
The baseboard has two 32-bit PCI bus segments: PCI-A and PCI-B. These provide seven slots for
PCI add-in boards: three on PCI-A and four on PCI-B. PCI-B4 is shared with the ISA slot.
PCI-A1 supports half-length boards only. The other slots support full-length boards. PCI features:
• 33 MHz bus speed
• 32-bit memory addressing
• 5 V signaling environment
• Burst transfers of up to 133 MB/sec
• 8-, 16-, or 32-bit data transfers
• Plug and Play ready
• Parity enabled
24
Video
The onboard, integrated Cirrus Logic CL-GD5480 64-bit VGA chip contains an SVGA controller
†
that is fully compatible with these video standards: CGA
VGA. The standard system configuration comes with 2 MB of 10 ns onboard video memory. The
video controller supports pixel resolutions of up to 1600 x 1200 and up to 16.7 M colors.
The SVGA controller supports analog VGA monitors (single and multiple frequency, interlaced
and noninterlaced) with a maximum vertical retrace noninterlaced frequency of 100 Hz.
You can not add video memory to this system. Depending on the environment, the controller
displays up to 16.7 M colors in some video resolutions. It also provides hardware-accelerated bit
block transfers (BITBLT) of data.
, EGA†, Hercules† Graphics, MDA†, and
SCSI Controller
The baseboard includes two SCSI controllers. A narrow SCSI controller (SYM53C810AE) is on
the PCI-A bus, and a dual-channel wide LVD/SE (Ultra2/Ultra) SCSI controller (SYM53C896) is
on the PCI-B bus. The narrow provides support for the legacy 8-bit SCSI devices in the 5.25-inch
drive bays. The wide drives one SCSI backplane and provides support for external expansion.
Internally, each wide channel is identical, capable of operations using either 8- or 16-bit SCSI
providing 10 MB/sec (Fast-10) or 20 MB/sec (Fast-20) throughput, or 20 MB/sec (Ultra),
40 MB/sec (Ultra-wide) or 80 MB/sec (40 Mhz) (Ultra-2).
The SYM53C810AE (narrow) contains a high-performance SCSI core capable of Fast 8-bit SCSI
transfers in single-ended mode. It provides programmable active negation, PCI zero wait-state
bursts of faster than 110 MB/sec at 33 MHz, and SCSI transfer rates from 5 to 10 MB/sec. The
narrow SCSI comes in a 100-pin rectangular plastic quad flat pack (PQFP) and provides an “AND
tree” structure for testing component connectivity.
The Sym53C896 (wide) contains a high-performance SCSI bus interface. It supports SE mode
with 8-bit (10 or 20 MB/sec) or 16-bit (20 or 40 MB/sec) transfers and LVD mode with
8-bit (40 MB/sec) or 16-bit (80 MB/sec) transfers in a 329-pin ball grid array (BGA) package.
Each controller has its own set of PCI configuration registers and SCSI I/O registers. As a
PCI 2.1 bus master, the SYM53C896 supports burst data transfers on PCI up to the maximum rate
of 132 MB/sec using on-chip buffers.
In the internal bay, the system supports up to six one-inch SCSI hard disk drives, plus, in the
5.25-inch removable media bays, three SCSI or IDE devices (the controller itself supports more
devices, but the 5.25-inch bay can contain a maximum of three devices). A wide SCSI cable
provides two connectors for Ultra SCSI devices (one of these connectors is for the optional SCSI
backplane, if your system has that). However, SCSI devices do not need to operate at the ultra
transfer rate. All drives on the bus must be Ultra-2 (LVD) to run at 80MB/sec (40Mhz). The 5,
10, and 20Mhz operations can coexist on the bus and each device will interact at its appropriate
speed.
No logic, termination, or resistor loads are required to connect devices to the SCSI controller other
than termination in the device at the end of the cable. The SCSI bus is terminated on the baseboard
with active terminators that can be disabled.
25
IDE Controller
IDE is a 16-bit interface for intelligent disk drives with AT† disk controller electronics onboard.
The PCI/ISA/IDE Accelerator, called PIIX4E, is a multifunction device on the baseboard that acts
as a PCI-based Fast IDE controller. The device controls:
• PIO and IDE DMA/bus master operations
• Mode 4 timings
• Transfer rates up to 22 MB/sec
• Buffering for PCI/IDE burst transfers
• Master/slave IDE mode
• Up to two drives for one IDE channel
NOTE
✏
18-inch maximum length of IDE cable on each channel: you can connect
an IDE signal cable, up to a maximum of 18 inches, to the IDE connector on
the baseboard. The cable can support two devices, one at the end of the
cable and one six inches from the end.
Keyboard and Mouse
The PS/2-compatible keyboard and mouse connectors are mounted in a single-stacked housing
with the mouse connector over the keyboard. External to the system, they appear as two
connectors.
The user can plug in the keyboard and mouse to either connector before powering up the system.
BIOS detects these and configures the keyboard controller accordingly.
The keyboard controller is functionally compatible with the 8042A microcontroller. The system
can be locked automatically if no keyboard or mouse activity occurs for a predefined length of
time, if specified through the SSU. Once the inactivity (lockout) timer has expired, the keyboard
and mouse do not respond until the previously stored password is entered.
26
Server Management
Server Management features are implemented using one microcontroller, the Baseboard
Management Controller (BMC).
Baseboard Management Controller (BMC)
The BMC and associated circuitry are powered from 5V_Standby, which remains active when
system power is switched off.
The primary function of the BMC is to autonomously monitor system platform management events
and log their occurrence in the nonvolatile System Event Log (SEL). These events include
overtemperature and overvoltage conditions, fan failure, or chassis intrusion. While monitoring,
the BMC maintains the nonvolatile sensor data record repository (SDRR), from which run-time
information can be retrieved. The BMC provides an ISA host interface to SDRR information, so
software running on the server can poll and retrieve the current status of the platform. A shared
register interface is defined for this purpose.
SEL contents can be retrieved after system failure for analysis by field service personnel using
®
system management tools like Intel
by 5V_Standby, SEL (and SDRR) information is also available via the interperipheral
management bus (IPMB). An emergency management board like the Intel LANDesk SMM board
can obtain the SEL and make it remotely accessible using a LAN or telephone line connection.
During monitoring, the BMC performs the following functions:
• Baseboard temperature and voltage monitoring
• Processor presence monitoring and FRB control
• Baseboard fan failure detection and indicator control
• SEL interface management
• Sensor Data Record Repository (SDRR) interface management
• SDR/SEL timestamp clock
• Baseboard Field Replaceable Unit (FRU) information interface
• System management watchdog timer
• Periodic SMI timer
• Front panel NMI handling
• Event receiver
• ISA host and IPMB interface management
• Secure mode control, front panel lock/unlock initiation, and video blank and diskette write
protect monitoring and control
• Sensor event initialization agent
• Wake on LAN via Magic Packet
• ACPI Support
• Emergency Management Port (EMP) support
LANDesk® Server Manager. Because the BMC is powered
†
support
27
System Security
To help prevent unauthorized entry or use of the system, the system includes a three-position key
lock/switch to permit selected access to drive bays (position is communicated to BMC). The
system also includes server management software that monitors the chassis intrusion switch.
Mechanical Locks and Monitoring
The system includes a chassis intrusion switch. When the access cover is opened, the switch
transmits an alarm signal to the baseboard, where server management software processes the
signal. The system can be programmed to respond to an intrusion by powering down or by locking
the keyboard, for example.
Software Locks via the SSU or BIOS Setup
The SSU provides a number of security features to prevent unauthorized or accidental access to the
system. Once the security measures are enabled, access to the system is allowed only after the user
enters the correct password(s). For example, the SSU allows you to:
• Enable the keyboard lockout timer so the server requires a password to reactivate the keyboard
and mouse after a specified time-out period of 1 to 120 minutes
• Set and enable administrator and user passwords
• Set secure mode to prevent keyboard or mouse input and to prevent use of the front panel reset
and power switches
• Activate a hot-key combination to enter secure mode quickly
• Disable writing to the diskette drive when secure mode is set
Using Passwords
If you set and enable a user password but not an administrator password, enter the user password to
boot the system and run the SSU.
If you set and enable both a user and an administrator password:
• Enter either one to boot the server and enable the keyboard and mouse
• Enter the administrator password to access the SSU or BIOS Setup to change the system
configuration
Secure Mode
Configure and enable the secure boot mode by using the SSU. When secure mode is in effect, you:
• Can boot the system and the OS will run, but you must enter the user password to use the
keyboard or mouse
• Cannot turn off system power or reset the system from the front panel switches
Secure mode has no effect on functions enabled via the Server Manager Module or power control
via the real-time clock (RTC).
Taking the system out of secure mode does not change the state of system power. That is, if you
press and release the power switch while secure mode is in effect, the system will not power off
when secure mode is later removed. However, if the front panel power switch remains depressed
when secure mode is removed, the system will power off.
28
Summary of Software Security Features
Table 5 lists the software security features and describes what protection each offers. In general,
to enable or set the features listed here, you must run the SSU and go to the Security Menu
(described in this manual on page 41). The table also refers to other SSU menus and to the Setup
utility. For greater detail, see Chapter 3, beginning on page 31.
Table 5.Software Security Features
FeatureDescription
Put the system into
secure boot mode
Disable writing to disketteIn secure mode, the system will not boot from or write to a diskette unless a
Disable the power and
reset buttons
Set a time-out period so
that keyboard and mouse
input are not accepted
Also, screen can be
blanked and writes to
diskette can be inhibited
How to enter secure mode:
Setting and enabling passwords automatically puts the system into secure
mode.
If you set a hot-key combination (through the SSU or Setup), you can secure
the system simply by pressing the key combination. This means you do not
have to wait for the inactivity time-out period. See “Security Menu” on
page 41.
When the system is in secure mode:
The system can boot and run the OS, but mouse and keyboard input is not
accepted until the user password is entered.
At boot time, if a CD is detected in the CD-ROM drive or a diskette in drive A,
the system prompts for a password. When the password is entered, the
system boots from CD or diskette and disables the secure mode.
If you have not yet installed a CD-ROM drive, if there is no CD in the drive or
diskette in drive A, the system boots from drive C and automatically goes into
secure mode. All enabled secure mode features go into effect at boot time.
To leave secure mode:
Enter the correct password(s).
password is entered. To set these features, see “Secure Mode Boot” and
“Floppy Write Protect” in “Security Menu,” page 41.
If this protection feature is enabled by the SSU, the power and reset buttons
are disabled when in secure mode.
You can specify and enable an inactivity time-out period of from 1 to
120 minutes. If no keyboard or mouse action occurs for the specified period,
attempted keyboard and mouse input will not be accepted. To set this
feature, see “Secure Mode Timer” in “Security Menu,” page 41.
If video blanking is enabled, the monitor display will go blank until the correct
password(s) is entered. To set this feature, see “Video Blanking” in “Security
Menu,” page 41.
continued
29
Table 5.Software Security Features
FeatureDescription
Control access to using
the SSU: set
administrator password
To control access to setting or changing the system configuration, set an
administrator password and enable it through Setup or the SSU.
If both the administrator and user passwords are enabled, either can be used
to boot the system or enable the keyboard and/or mouse, but only the
administrator password allows changes to Setup and the SSU.
Once set, passwords can be disabled by setting the password to a null string
or by changing the Clear Password jumper. See “Security Menu,” page 41;
or, to change a jumper, see “Baseboard Jumpers,” page 151.
(continued)
Control access to the
system other than SSU:
set user password
Boot without keyboardThe system can boot with or without a keyboard. Before the system boots
Specify the boot
sequence
To control access to using the system, set a user password and enable
Password on Boot through Setup or the SSU.
Once set, passwords can be disabled by setting the password to a null string
or by changing the Clear Password jumper. See “Security Menu,” page 41;
or, to change a jumper, see “Baseboard Jumpers,” page 151.
during POST, BIOS automatically detects and tests the keyboard, if present,
and displays a message. No entry exists in the SSU for enabling or disabling
a keyboard. Do not plug in a keyboard while power is applied to the system.
The sequence you specify in the Boot Device Priority Submenu (see page 44)
of the SSU’s Boot Menu determines the boot order. If secure mode is
enabled (user password is set), you will be prompted for a password before
the system boots fully. If secure mode is enabled and the “Secure Mode
Boot” option is also enabled, the system boots fully but requires a password
before accepting any keyboard or mouse input.
30
Loading...
+ 170 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.