IBM Netfinity 3500 M10, User Handbook Manual

Page: 69 / 268

If enhanced security is enabled and you have not set an
administrator password, your server will operate as if enhanced
security were disabled. If enhanced security is enabled and you
have set an administrator password, your server will operate as
follows:
Ÿ
The contents of the security EEPROM (your administrator
password and startup sequence) will be protected from failure
of the battery and CMOS memory.
Ÿ
The security EEPROM will be protected from unauthorized
access because it locks after your server is turned on and the
system programs have completed their startup routine. Once it
is locked, the security EEPROM cannot be read from or written
to by any software application or system software until the
server is turned off and back on again. In a networking
environment, this might prevent certain functions from being
performed remotely on your server.
There is an extra measure of protection for the system programs
in your server. Normally, the entire contents of the system
programs EEPROM is write protected with a soft lock. A soft
lock allows the POST/BIOS update utility to function in a
network environment. Enhanced security adds a hard lock.
With a hard lock, when your server is turned on and the system
programs startup routine is completed, the POST/BIOS update
utility is locked and cannot be unlocked until the server is
turned off and back on again and the administrator password is
entered. Note that in a networking environment this prevents
the system programs in your server from being updated
remotely. Someone must be present at your server to turn it on
and off in order to unlock the POST/BIOS update utility.
Ÿ
A chassis-intrusion feature will alert you if the cover of your
server has been removed. This feature will work if your server
is on or off when the cover is removed. If the cover has been
removed, a prompt for your administrator password will appear
on the screen, and your server will remain in a halted state until
your administrator password is entered.
Ÿ
As with nonenhanced security, your configuration settings are
protected. The settings cannot be changed in the
Chapter 3. Configuration/Setup Utility program
51