Appendix A. Security And Convenience - Lenovo ThinkCentre M58 Deployment Manual

Appendix A. Security and convenience

Computer security is often considered much more important more convenience. The following table
illustrates how Hardware Password Manager policy settings can be configured to optimize security and
convenience.
Note: Default values are highlighted in italics.
Table 1. Hardware Password Manager policy settings
Policy setting
Client - BIOS Policy
Show last logon account
for Hardware Account
Prompt for Hardware
Account on warm boot
Client - Common
Hardware Passwords
Set Common SVP
Set Common POP
Set Common MHDP
Set Common UHDP
Client - Emergency
Account
© Copyright Lenovo 2010
Description
Determines whether BIOS should cache
the Hardware Account user name that
successfully logged in to the system last time.
The password is not cached and the user will
have to enter it each time.
Determines whether to prompt for the
Hardware Account each time the system
restarts.
Determines whether to set the Supervisor
Password (SVP) to a common hard-coded
value, or to generate the password
automatically. Using a common SVP can
make it easier for the administrator to manually
enter the SVP if necessary (for example, to
enter the BIOS setup and change settings).
Determines whether to set the Power-on
Password (POP) to a common hard-coded
value or to generate the POP automatically.
Determines whether to set the Master Hard
Drive Password (MHDP) to a common
hard-coded value or to generate the password
automatically. Using a common MHDP can
make it easier for the administrator to manually
enter the MHDP if necessary (for example, to
enter the BIOS setup and clear the UHDP and
MHDP).
Determines whether to set the User Hard Drive
Password (UHDP) to a common hard-coded
value or to generate the UHDP automatically.
Most secure Most convenient
Not Selected Selected
Selected Not selected
Not Selected Selected
(auto-generated (hard-code
password) password)
Not Selected Selected
(auto-generated (hard-code
password) password)
Not Selected Selected
(auto-generated (hard-code
password) password)
Not Selected Selected
(auto-generated (hard-code
password) password)
37