HP Xw4200 - Workstation - 1 GB RAM, Service And Technical Reference Manual

Page: 59 / 206

DESKTOP MANAGEMENT
59
Chapter 3
USING DRIVELOCK
The DriveLock option appears under the Security menu in Computer Setup. The user is presented with
options to set the master password or to enable DriveLock. A user password must be provided to enable
DriveLock. Since the initial configuration of DriveLock is typically performed by a system administrator, a
master password should be set first. HP encourages system administrators to set a master password
whether they plan to enable DriveLock or keep it disabled. This will give the administrator the ability to
modify DriveLock settings if the drive is locked in the future. Once the master password is set, the
system administrator can enable DriveLock or choose to keep it disabled.
If a locked hard drive is present, POST will require a password to unlock the device. If a power-on
password is set and it matches the user password of the device, POST will not prompt the user to re-
enter the password. Otherwise, the user will be prompted to enter a DriveLock password. Either the
master or the user password can be used. Users will have two attempts to enter a correct password. If
neither attempt succeeds, POST will continue but the data on the drive will remain inaccessible.
DRIVELOCK APPLICATIONS
The most practical use of the DriveLock security feature is in a corporate environment where a system
administrator provides users with MultiBay hard drives for use in some desktop workstations. The
system administrator would be responsible for configuring the MultiBay hard drive which would involve,
among other things, setting the DriveLock master password. In the event that the user forgets the user
password or the equipment is passed on to another employee, the master password can always be used
to reset the user password and regain access to the hard drive.
HP recommends that corporate system administrators who choose to enable DriveLock also establish a
corporate policy for setting and maintaining master passwords. This should be done to prevent a
situation where an employee intentionally or unintentionally sets both DriveLock passwords before
leaving the company. In such a scenario, the hard drive would be rendered unusable and require
replacement. Likewise, by not setting a master password, system administrators might find themselves
locked out of a hard drive and unable to perform routine checks for unauthorized software, other asset
control functions and support.
For users with less stringent security requirements, HP does not recommend enabling DriveLock. Users
in this category include personal users or users who do not maintain sensitive data on their hard drives
as a common practice. For these users, the potential loss of a hard drive resulting from forgetting both
passwords is much greater than the value of the data DriveLock has been designed to protect. Access to
Computer Setup and DriveLock can be restricted through the Setup password. By specifying a Setup
password and not giving it to end users, system administrators are able to restrict users from enabling
DriveLock.