4. Preboot Authentication Manager
Preboot Authentication Manager provides security for a system when it is not turned on. This option requires that a user's identity be authenticated before the computer boots up. Preventing the operating system from loading means unauthorized users are effectively shut out of the system, so that if the PC is stolen or lost, it secures the data on the hard drive from being exposed.
The Preboot Manager guides the administrative user through setting up the appropriate system level passwords. Then, the administrator can set up Preboot Authentication by using a fingerprint scanner or a smart card in place of the passwords. The Preboot Manager is used to configure the security settings, set the passwords, and enroll the smart card or fingerprint.
You access Preboot Manager by starting the ESC and selecting Preboot Manager (see Figure 4.1). From the main window, the user can see the status of the system level passwords, whether Preboot Authentication is turned on for the system, and whether the Pre-Boot Authentication also is set to log the user into Windows.
Note:
Only a Windows system administrator or a user with administrative rights is able to set up Preboot Authentication using Preboot Manager. A limited user that does not have administrative rights will have access to change the smart card PIN.
Additionally, the TPM security chip does not need to be enabled or used in order to use the Preboot Manager.
If a fingerprint scanner is not embedded in this system, Preboot Manager supports UPEK sensors. If a smart card was not included with this system, please contact the system manufacturer. |
Figure 4.1: Preboot Manager
The Administrator will choose the Set button to set system level passwords for the system, such as the System password and a Hard Drive password. The Hard Drive password is used to protect the internal hard drive. At a minimum, the System User password must be specified.
Once set, this system will prompt for the user to enter the System User password, followed by the hard disk password during system boot. However, the Preboot Manager allows the bypassing of these passwords by using convenient smart card or fingerprint authentication.
Note : if the Set or Change buttons in the Preboot Manager are inactive, it means you don't have the necessary privileges to make those changes.
|
Setting up Password
Changing Passwords
Enroll Fingerprint or Smartcard
Preboot Manager Advanced Settings
|
