Protecting Against Unauthorized Access - User Authentication; Pre-Boot Authentication On Hp Notebooks - HP Compaq NC4010 Features Manual

Embedded Layers of Protection
Protecting against unauthorized access – user
authentication
User authentication on current operating systems is password based. These operating systems
authenticate users and grant access based on the correct entry of a user name and password.
Externally, software tools can enhance this functionality to require devices other than passwords, such
as hardware tokens and biometrics, but the underlying authentication is still password based. This
means that the smart card login software installed to support smart cards forces a user to authenticate
using a smart card, but passes that authentication to the operating system using a password.
This operating system password is stored on the system, and can be manipulated to gain
unauthorized access. Currently, software tools exist that can reset an operating system password,
unlocking the user account.
In order to help protect the user from such an intrusion, another layer of authentication is added. This
authentication is referred to as "pre-boot authentication" and occurs immediately after turning on the
computer and before the operating system is allowed to load.

Pre-boot Authentication on HP Notebooks

Pre-boot authentication requiring passwords has been available on computers for some time. HP has
now expanded this functionality to allow authentication via other devices. This allows users to use the
same device for pre-boot as well as operating system level authentication, making the process easy
and convenient for authorized users.
HP nc series business notebooks feature support for three types of authentication at boot-up:
Power-on password – the user is required to enter a password on boot
1.
Smart card authentication – the user is required to present the correct smart card and PIN on boot
2.
Embedded security chip authentication – the user is required to enter their basic user key pass
3.
phrase on boot
All three of these features provide layers of protection against unauthorized access to the notebook
including attacks that take advantage of the ability to boot to a device other than the primary hard
drive.
3