disabling boot devices on poweredge servers?

J. Epperson Dell at epperson.homelinux.net
Wed May 5 20:27:35 CDT 2010


On Wed, May 5, 2010 20:57, Adam Nielsen wrote:
>
> I think most if not all machines have a hardware method to reset the
> BIOS settings (jumper, dipswitch, etc.)  At the very least simply
> popping out the CMOS battery for a few seconds (while the machine is
> off) will do it.
>
> Yes, securing the chassis is the only way around this, but then if your
> chassis is secured properly, nobody is going to be able to boot off a CD
> or USB drive anyway.  Or remove your hot swappable disks and walk off
> with them ;-)

And likewise, in any environment where subversion of the boot process is a
concern meriting such lockdown, the network should be secured in such a
fashion as to prevent rogue PXE boot vectors.




More information about the Linux-PowerEdge mailing list