Appendix B Hewlett-Packard Password Removal Policy

Appendix B - Hewlett-Packard Password Removal Policy

If the user forgets the system password, there is a master password that will unlock the OmniBook. The user calls Technical Support to determine this master password as follows:

1.Support will tell the user the keys to type at the password entry screen: [Alt][Shift][f10]

2.The OmniBook generates and displays an encoded master password. This is displayed under the normal password entry area. At this point, this is the only password that will unlock the OmniBook unless the user presses [ESC] to remove the encoded master from the password entry screen. Then the user's stored password can be entered.

3.The user reads the encoded master password to Support.

4.Support runs a program that decodes the encoded password, and reads the decoded password (alphanumeric) to the user.

5.The user types in the decoded password.

6.OmniBook decodes the encoded master password it generated and compares it to the decoded password typed in by the user.

7.If the two passwords match, the OmniBook is unlocked. The forgotten password is automatically erased. Support can then guide the user through the process of entering a new password.

8.If the two passwords do not match, the previous sequence must be repeated until the user correctly enters a master password.

The encoded master password is an eight-character alphanumeric sequence that the OmniBook generates at random every time the appropriate keys are pressed in the password entry screen. Because it is generated randomly, a master password can only be used to unlock the OmniBook once. If the user forgets the password at another time, it will require another call to Support. (If the user presses the appropriate keys by mistake, pressing [ESC] will allow entering the stored password.)

The password descramble programs for the HP OmniBook Notebook PCs are protected as HP Company Private information. They may not be copied, backed-up, printed or distributed. There are only six official copies of each program.

In addition to the program being protected, its use is also controlled. Hewlett- Packard and authorized support providers must ensure with written evidence that the OmniBook that is being "descrambled" is actually in the hands of the unit's actual and current owner. This requires a sales receipt showing the unit serial number and owner's name, or a written statement from the owner attesting that he or she is the owner of the unit. The statement can be a fax copy of the document. The fact that the unit is in the hands of an HP representative on behalf of the customer is not evidence of ownership. In addition, HP will not descramble a unit for any non-owner, even if it involves