Description 17
ISM can use an optional service partition on the server that you are managing. The service partition
is a special disk partition on the system drive that contains a ROM-DOS operating system and
DOS-based utilities, including the System Setup Utility, FRU/SDR Load Utility, and Remote
Diagnostics. The server can be booted to the service partition, either locally or remotely, to provide
access to the utilities.
For more information on Intel Server Management and the individual ISM applications, see the
ISM CD.
Security

Intrusion Switch Monitoring

To help prevent unauthorized entry or use of the server, Intel Server Management server
management software monitors the chassis intrusion switch if one is installed. Opening an access
cover will transmit an alarm signal to the server board, where BMC firmware and server
management software process the signal. The system can be configured through ISM to respond to
an intrusion a number of ways, including powering down or locking the keyboard.

Software Locks

The BIOS Setup and the System Setup Utility (SSU) provide a number of security features to
prevent unauthorized or accidental access to the system. Once the security measures are enabled,
you can access the system only after you enter the correct password(s). For example:
Enable the keyboard lockout timer so that the server requires a password to reactivate the
keyboard and mouse after a specified time out period¾1 to 120 minutes.
Set and enable a supervisor password.
Set and enable a user password.
Set secure mode to prevent keyboard or mouse input and to prevent use of the front panel reset
and power switches.
Activate a hot key combination to enter secure mode quickly.
Disable writing to the diskette drive when secure mode is set.
Disable access to the boot sector of the operating system hard disk drive.

Using Passwords

You can set either the user password, the supervisor password, or both passwords. If only the user
password is set, you:
Must enter the user password to enter BIOS Setup or the SSU.
Must enter the user password to boot the server if Password on Boot is enabled in either the
BIOS Setup or SSU.
Must enter the user password to exit secure mode.