Controlling Access to System Hardware

You can protect a physical machine by requiring a password to gain access to the hardware settings. You can also protect the system by preventing a user from using the abort sequence to leave the windowing system.

To protect the BIOS, consult the vendor documentation. To require encryption and verification when booting, see Using Trusted Platform Module and Using Verified Boot.