Penguin Computing Relion 1900e, Technical Manual

Page: 69 / 174

Relion 1900e/2900e Manual
Revision 1.0 54
The Administrator and User passwords must be different from each other. An error message will be
displayed and a different password must be entered if there is an attempt to enter the same password for
both. The use of “Strong Passwords” is encouraged, but not required. In order to meet the criteria for a
strong password, the password entered must be at least 8 characters in length, and must include at least one
each of alphabetic, numeric, and special characters. If a weak password is entered, a warning message will be
displayed, and the weak password will be accepted. Once set, a password can be cleared by changing it to a
null string. This requires the Administrator password, and must be done through BIOS Setup. Clearing the
Administrator password will also clear the User password. Passwords can also be cleared by using the
Password Clear jumper on the server board. See Chapter 10 – Reset and Recovery Jumpers.
Resetting the BIOS configuration settings to default values (by any method) has no effect on the
Administrator and User passwords.
As a security measure, if a User or Administrator enters an incorrect password three times in a row during the
boot sequence, the system is placed into a halt state. A system reset is required to exit out of the halt state.
This feature makes it more difficult to guess or break a password.
In addition, on the next successful reboot, the Error Manager displays a Major Error code 0048, which also
logs a SEL event to alert the authorized user or administrator that a password access failure has occurred.
Note : When BIOS admin password is set, and user is updating the BIOS with a customized by the ITK tool the
command requires to append password=”[AdminPassword]” to the commands of Iflash32.
Example: Iflash32.efi /u /ni “[Bios File.cap]” password=”[AdminPassword]”
6.1.2 System Administrator Password Rights
When the correct Administrator password is entered when prompted, the user has the ability to perform the
following:
• Access the <F2> BIOS Setup Utility
•
Configure all BIOS setup options in the <F2> BIOS Setup Utility
• Clear both the Administrator and User passwords
•
Access the <F6> Boot Menu during POST
•
If the Power On Password function is enabled in BIOS Setup, the BIOS will halt early in POST to
request a password (Administrator or User) before continuing POST.
6.1.3 Authorized System User Password Rights and Restrictions
When the correct User password is entered, the user has the ability to perform the following:
• Access the <F2> BIOS Setup Utility
•
View, but not change, any BIOS Setup options in the <F2> BIOS Setup Utility
• Modify System Time and Date in the BIOS Setup Utility
•
If the Power On Password function is enabled in BIOS Setup, the BIOS will halt early in POST to
request a password (Administrator or User) before continuing POST
Configuring an Administrator password imposes restrictions on booting the system, and configures most
Setup fields to read-only if the Administrator password is not provided. The F6 Boot popup menu requires
the Administrator password to function, and the USB Reordering is suppressed as long as the Administrator
password is enabled. Users are restricted from booting in anything other than the Boot Order defined
in Setup by an Administrator.