HP Xw4400 - Workstation - 2 GB RAM Reference Manual page 55

HP recommends that corporate system administrators who choose to enable DriveLock also establish
a corporate policy for setting and maintaining master passwords. This should be done to prevent a
situation where an employee intentionally or unintentionally sets both DriveLock passwords before
leaving the company. In such a scenario, the hard drive would be rendered unusable and require
replacement. Likewise, by not setting a master password, system administrators may find themselves
locked out of a hard drive and unable to perform routine checks for unauthorized software, other asset
control functions, and support.
For users with less stringent security requirements, HP does not recommend enabling DriveLock. Users
in this category include personal users or users who do not maintain sensitive data on their hard drives
as a common practice. For these users, the potential loss of a hard drive resulting from forgetting both
passwords is much greater than the value of the data DriveLock has been designed to protect.
Access to Computer Setup and DriveLock can be restricted through the Setup password. By specifying
a Setup password and not giving it to end users, system administrators are able to restrict users from
enabling DriveLock.
Using DriveLock
When one or more hard drives that support the ATA Security command set are detected, the DriveLock
option appears under the Security menu in Computer Setup. You are presented with options to set the
master password and to enable DriveLock. A user password must be provided in order to enable
DriveLock. Since the initial configuration of DriveLock is typically performed by a system administrator,
a master password should be set first. HP encourages system administrators to set a master password
whether they plan to enable DriveLock or keep it disabled. This will give the administrator the ability to
modify DriveLock settings if the drive is locked in the future. Once the master password is set, the system
administrator may enable DriveLock or choose to keep it disabled.
If a locked hard drive is present, POST will require a password to unlock the device. If a power-on
password is set and it matches the device's user password, POST will not prompt the user to re-enter
the password. Otherwise, the user will be prompted to enter a DriveLock password. On a cold boot,
either the master or the user password may be used. On a warm boot, enter the same password used
to unlock the drive during the preceding cold-boot. Users will have two attempts to enter a correct
password. On a cold boot, if neither attempt succeeds, POST will continue but the drive will remain
inaccessible. On a warm boot or restart from Windows, if neither attempt succeeds, POST will halt and
the user will be instructed to cycle power.
To enable and set the DriveLock user password:
1. Power on or restart the workstation.
2. As soon as the workstation is powered on, press and hold the F10 key until you enter Computer
Setup. Press Enter to bypass the title screen, if necessary.
NOTE:
and press and hold the F10 key again to access the utility. If you are using a PS2 keyboard, you
might see a Keyboard Error message—disregard it.
3. Select Security > DriveLock Security.
4. For each DriveLock-capable drive, select a drive by pressing the F10 key to accept.
5. Under Enable/Disable Drive Lock options, select Enable and press the F10 key to enable the
DriveLock for a particular drive.
WARNING!
6. Enter a new user password and press the F10 key to accept. This password may be 1 to 32
characters long.
ENWW
If you do not press the F10 key at the appropriate time, you must restart the workstation
Forgetting the DriveLock password will render the drive unusable.
Desktop management 45