System Security
Intel® Server Board S2600CW Family TPS
56
Revision 2.4
The Administrator and User passwords must be different from each other. An error message
will be displayed if there is an attempt to enter the same password for one as for the other.
The use of “Strong Passwords” is encouraged, but not required. In order to meet the criteria
for a “Strong Password”, the password entered must be at least eight characters in length, and
must include at least one each of alphabetic, numeric, and special characters. If a “weak”
password is entered, a popup warning message will be displayed, although the weak password
will be accepted.
Once set, a password can be cleared by changing it to a null string. This requires the
Administrator password, and must be done through the BIOS Setup or other explicit means of
changing the passwords. Clearing the Administrator password will also clear the User
password.
Alternatively, the passwords can be cleared by using the Password Clear jumper if necessary.
Resetting the BIOS configuration settings to the default values (by any method) has no effect
on the Administrator and User passwords.
Entering the User password allows the user to modify only the System Time and System Date
in the Setup Main screen. Other setup fields can be modified only if the Administrator
password has been entered. If any password is set, a password is required to enter the BIOS
setup.
The Administrator has control over all fields in the BIOS setup, including the ability to clear the
User password and the Administrator password.
It is strongly recommended that at least an Administrator Password be set, because not
having set a password gives everyone who boots the system the equivalent of Administrative
access. Unless an Administrator password is installed, any User can go into the Setup and
change the BIOS settings at will.
In addition to restricting access to most Setup fields to viewing only when a User password is
entered, defining a User password imposes restrictions on booting the system. In order to
simply boot in the defined boot order, no password is required. However, the F6 Boot popup
prompts for a password, and can only be used with the Administrator password. Also, when a
User password is defined, it suppresses the USB Reordering that occurs, if enabled, when a
new USB boot device is attached to the system. A User is restricted from booting in anything
other than the Boot Order defined in the Setup by an Administrator.
As a security measure, if a User or Administrator enters an incorrect password three times in a
row during the boot sequence, the system is placed into a halt state. A system reset is required
to exit out of the halt state. This feature makes it more difficult to guess or break a password.
In addition, on the next successful reboot, the Error Manager displays a Major Error code
0048, which also logs a SEL event to alert the authorized user or administrator that a
password access failure has occurred.
