HP FL939UT FL939UT#ABA manual Sata hard disk drive security, 2Security features overview

Table 4-2Security features overview

Feature	Purpose	How it is established
Removable Media Boot Control	Prevents booting from removable media	From the Computer Setup (F10)
	drives	Utility menu
Serial, Parallel, USB, or Infrared	Prevents transfer of data through the	From the Computer Setup (F10)
Interface Control	integrated serial, parallel, USB, or infrared	Utility menu
	interface
Power-On Password	Prevents use of the workstation until the	From the Computer Setup (F10)
	password is entered (applies to initial system	Utility menu
	startup and restarts)

Setup Password	Prevents reconfiguration of the workstation
	(use of the Setup utility) until the password is
	entered

From the Computer Setup (F10) Utility menu

Network Server Mode	Provides unique security features for
	workstations used as servers

From the Computer Setup (F10) Utility menu

SATA hard disk drive security

HP workstations include the HP DriveLock facility for SATA hard disk drives to prevent unauthorized access to data.

WARNING! Enabling DriveLock can render a SATA hard disk drive permanently inaccessible if the master password is lost or forgotten. No method exists to recover the password or access the data.

DriveLock has been implemented as an extension to Computer Setup (F10) functions. It is only available when hard disk drives that support the ATA security command set are detected. On HP workstations, it is not available when the SATA emulation mode is RAID+AHCI or RAID.

DriveLock is for HP customers for whom data security is a paramount concern. For such customers, the cost of a hard disk drive and the loss of the data stored on it is inconsequential when compared to the damage that could result from unauthorized access to its contents.

To balance this level of security with the need to address the issue of a forgotten password, the HP implementation of DriveLock employs a two-password security scheme. One password is intended to be set and used by a system administrator, while the other is typically set and used by the user.

No "back door" can be used to unlock the drive if both passwords are lost. Therefore, DriveLock is most safely used when the data contained on the hard disk drive is replicated on a corporate information system or is regularly backed up.

If both DriveLock passwords are lost, the hard disk drive is rendered unusable. For users who do not fit the previously defined customer profile, this might not be acceptable. For users who fit this profile, it might be a tolerable risk, given the nature of the data stored on the hard disk drive.

ENWW Workstation management 51