Table 7-3Computer Setup—Security (continued)

Device Security

Allows you to set Device Available/Device Hidden (default is Device Available) for:

 

●

Embedded security device

 

●

System audio

 

●

Network controller

 

●

Serial port (if applicable)

 

●

Parallel port (if applicable)

 

●

SATA ports (varies by model)

 

 

USB Security

Allows you to set Enabled/Disabled (default is Enabled) for:

 

●

Front USB Ports

 

●

Rear USB Ports

 

●

Accessory USB Ports

 

 

Slot Security

Allows you to disable any PCI or PCI Express slot. Default is enabled.

 

 

Network Boot

Enables/disables the computer’s ability to boot from an operating system installed on a network server.

 

(Feature available on NIC models only; the network controller must be either a PCI expansion card or

 

embedded on the system board.) Default is enabled.

 

 

System IDs

Allows you to set:

 

●

Asset tag (18-byte identifier), a property identification number assigned by the company to the

 

 

computer.

 

●

Ownership tag (80-byte identifier) displayed during POST.

 

●

Universal Unique Identifier (UUID) number. The UUID can only be updated if the current chassis

 

 

serial number is invalid. (These ID numbers are normally set in the factory and are used to uniquely

 

 

identify the system.)

 

●

Chassis serial number. (These ID numbers are normally set in the factory and are used to uniquely

 

 

identify the system.)

 

●

Keyboard locale setting for System ID entry.

 

 

Master Boot Security

Enables/disables Master Boot Record (MBR) security.

Record

The MBR contains information needed to successfully boot from a disk and to access the data stored on

 

 

the disk. Master Boot Record Security may prevent unintentional or malicious changes to the MBR, such

 

as those caused by some viruses or by the incorrect use of certain disk utilities. It also allows you to

 

recover the "last known good" MBR, should changes to the MBR be detected when the system is

 

restarted.

 

When MBR Security is enabled, the BIOS prevents any changes being made to the MBR of the current

 

bootable disk while in MS-DOS or Windows Safe Mode.

 

NOTE: Most operating systems control access to the MBR of the current bootable disk; the BIOS cannot

 

prevent changes that may occur while the operating system is running.

 

Restores the backup Master Boot Record to the current bootable disk. Default is disabled.

 

Only appears if all of the following conditions are true:

 

●

MBR security is enabled

 

●

A backup copy of the MBR has been previously saved

 

●

The current bootable disk is the same disk from which the backup copy was saved

 

CAUTION: Restoring a previously saved MBR after a disk utility or operating system has modified the

MBR, may cause the data on the disk to become inaccessible. Only restore a previously saved MBR if you are confident that the current bootable disk's MBR has been corrupted or infected with a virus.

162 Chapter 7 Computer Setup (F10) Utility