Using Drivelock - HP Z240 Maintenance And Service Manual

sets both DriveLock passwords before leaving the company. In such a scenario, the hard drive is unusable and
requires replacement. Likewise, by not setting a master password, system administrators might find
themselves locked out of a hard drive and unable to perform routine checks for unauthorized software, other
asset control functions, and support.
For users with less stringent security requirements, HP does not recommend enabling DriveLock. Users in this
category include personal users, or users who do not maintain sensitive data on their hard drives as a
common practice. For these users, the potential loss of a hard drive resulting from forgetting both passwords
is much greater than the value of the data DriveLock protects.
Access to Computer Setup (F10) Utility and DriveLock can be restricted through the administrator password.
By specifying an administrator password and not giving it to users, system administrators can restrict users
from enabling DriveLock.

Using DriveLock

When hard drives that support the ATA security command set are detected, DriveLock appears under the
Security menu in the Computer Setup (F10) Utility menu. You are presented with options to set the master
password and to enable DriveLock. You must provide a user password to enable DriveLock. Because the initial
configuration of DriveLock is typically performed by a system administrator, a master password should be set
first.
HP encourages system administrators to set a master password whether they plan to enable DriveLock or
not. This gives the administrator the ability to modify DriveLock settings if the drive is locked in the future.
After the master password is set, the system administrator can enable DriveLock or leave it disabled.
If a locked hard drive is present, POST requires a password to unlock the device. If a power-on password is set
and it matches the device's user password, POST does not prompt the user to re-enter the password.
Otherwise, the user is prompted to enter a DriveLock password.
For a cold start, use the master or user password. For a warm start, enter the same password used to unlock
the drive during the preceding cold start.
Users have two attempts to enter a correct password. During cold start, if neither attempt succeeds, POST
continues but the drive remains inaccessible. During a warm-start or restart from Windows, if neither attempt
succeeds, POST halts and the user is instructed to cycle power.
Enabling DriveLock
To enable and set the DriveLock user password:
1. Turn on or restart the computer.
2. As soon as you turn on the computer, repeatedly press the
Utility.
If you do not press
F10 again to access the utility.
3. Select Security > DriveLock Security.
4. For each DriveLock-capable drive, select a drive by pressing
5. To enable DriveLock for a specific drive, select Enable DriveLock
NOTE:
CAUTION:
6. Enter a new user password (1 to 32 characters long), and then press
F10 at the appropriate time, you must restart the computer, then repeatedly press
To set the DriveLock master password, select Set DriveLock Master Password.
If you forget the DriveLock password, the drive is unusable.
F10 key until you enter Computer Setup (F10)
F10 to accept.
F10 to accept.
Desktop management 35