Taking the system out of secure mode does not change the state of system power. That is, if you press and release the power switch while secure mode is in effect, the system will not power off when secure mode is later removed. However, if the front panel power switch remains depressed when secure mode is removed, the system will power off.

Summary of Software Security Features

Table 4 lists the software security features and describes what protection each offers. In general, to enable or set the features listed here, the SSU must be run and configured with the Security Menu (described in this manual on page 39.) The table also refers to other SSU menus and to the Setup utility. For greater detail, see Chapter 2, beginning on page 27.

Table 4. Software Security Features

Feature

Secure mode

Disable writing to diskette

Disable the power and reset buttons

Set a time out period so that keyboard and mouse input are not accepted

Also, screen can be blanked, and writes to diskette can be inhibited

Description

How to enter secure mode:

∙Setting and enabling passwords automatically places the system in secure mode.

∙If a hot key combination is set (through the SSU or Setup), the system can be secured simply by pressing the key combination. This means that the user does not have to wait for the inactivity time-out period.

When the system is in secure mode:

∙The server can boot and run the operating system, but mouse and keyboard input is not accepted until the user password is entered.

∙At boot time, if a CD is detected in the CD-ROM drive or a diskette in drive A, the system prompts for a password. When the password is entered, the server boots from CD or diskette and disables the secure mode.

∙If there is no CD in the CD-ROM drive or diskette in drive A, the server boots from drive C and automatically goes into secure mode. All enabled secure mode features go into effect at boot time.

To leave secure mode, enter the correct password(s).

In secure mode, the server will not boot from or write to a diskette unless a password is entered. To set this feature, use the SSU Security Subsystem Group.

To write protect access to diskette whether the server is in secure mode or not, use the Setup main menu, Floppy Options, and specify Floppy Access as read only.

Power and reset buttons are always disabled when the server is in secure mode.

Specify and enable an inactivity time out period of from 1 to 120 minutes.

If no keyboard or mouse action occurs for the specified period, attempted keyboard and mouse input will not be accepted.

The monitor display will go blank, and the diskette drive will be write protected (if these security features are enabled through Setup or the SSU and using onboard video).

To resume activity, enter the user password.

continued

Baseboard Description

25