Trusted Solaris Installation and Configuration

Protecting the Machine

For more information on PROM values that you can set, see OpenBoot 2.x Command Reference Manual or OpenBoot 3.x Command Reference Manual.

SPARC: Protect Machine Hardware

    In the terminal, enter the PROM security mode.


    # eeprom security-mode=command
    
    Changing PROM password:
    	New password: password
    	Retype new password: password
    

    Choose the value command or full. See the eeprom(1M) man page for more details.

    If you are not prompted to enter a PROM password, the system already has a PROM password. To change the PROM password, run the command:


    # eeprom security-password=Return
    Changing PROM password:
    New password: password
    Retype new password: password
    

    The new PROM security mode and password are in effect immediately, but are most likely to be noticed at the next boot.


    Caution - Caution -

    Do not forget this password. The hardware is unusable without it.


IA: Protect the BIOS

On Intel architecture, the equivalent to protecting the PROM is to protect the BIOS.

    Refer to your machine's manuals for how to protect the BIOS.