topic Re: Secure boot in Operating System - HP-UX

Secure boot

Graham Cameron — Wed, 13 Dec 2000 11:19:30 GMT

On a 9000 server (eg K series), is it
possible to password or otherwise protect
single user boot. The way our systems are,
a miscreant could power off and on a server,
interrupt the boot process, then get single
user access. The machines are already in
secure rooms but is there another level of
protection I can add ?

Re: Secure boot

Alex Glennie — Wed, 13 Dec 2000 11:24:20 GMT

you can set secure mode to on from the bootadmin menu : prevents users aping into single user mode on series 700 systems not sure about S800's though ?

Re: Secure boot

Victor BERRIDGE — Wed, 13 Dec 2000 11:32:23 GMT

On series 700 there were ways of doing so, which forced you to enter a passwd even in single user, the only parade was to dismantle the boot disk, then you had no other choice for you had no bootdisk, to interract with ISL...
There is nothing of the sort on a series 800 that I know of, but even so what yould be the point, because whoever crashes your HPsystem, has to know how to interract with ISL to enter the magic command..., so if he has that knowledge, he would also so any other HP tricks...

Just thoughts...
Best regards
Victor

Re: Secure boot

Victor BERRIDGE — Wed, 13 Dec 2000 11:39:14 GMT

Another thought...
You could get rid of anything that could be used as a console from your room, eventually replacing them by a DEC-console (multiple rs232), lanconsoles or web consoles.
No keyboard - less risk?

But then each time you have to go there for an intervention, you have to remember to take a console with you...

All the best
Victor

Re: Secure boot

Paula J Frazer-Campbell — Wed, 13 Dec 2000 12:19:18 GMT

Hi
If you use a pc based console in the secure room - set the bios password and keep it powered down.
I would suggest that you do not use the pc with a reset bios jumper on the motherboard - which tend to be HP machines.

Just an idea

Paula