+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Computer Hardware (https://hackforums.net/forumdisplay.php?fid=87)
+---- Thread: How to protect UEFI password even after CMOS settings reset? (/showthread.php?tid=5902664)
How to protect UEFI password even after CMOS settings reset? - Robert Downey Junior - Nov 2, 2018
Is there such a thing? Password-wise.
I've set supervisor and user password for my UEFI configuration, and want to make it so that even after resetting the jumper or CMOS battery, the password still stays.
Is there such an option?
Google doesn't give me the answer, so I think it must be something very silly for me not to be able to figure it out on my own.
RE: How to protect UEFI even after CMOS settings reset? - webdev77 - Nov 2, 2018
Most motherboards have built in reset passwords that you can't get rid of. The only requirement is that you can change the clock to a certain date and time which then matches to a specific reset password. A handy trick to get past passwords. Worst case, hardware flashing is an option but requires the right tools to do so. Long story short, don't worry about your UEFI passwords if someone has physical access to your machine.
RE: How to protect UEFI even after CMOS settings reset? - Robert Downey Junior - Nov 2, 2018
(Nov 2, 2018 10:37 AM)webdev77 Wrote: Most motherboards have built in reset passwords that you can't get rid of. The only requirement is that you can change the clock to a certain date and time which then matches to a specific reset password. A handy trick to get past passwords. Worst case, hardware flashing is an option but requires the right tools to do so. Long story short, don't worry about your UEFI passwords if someone has physical access to your machine.
Thank you for the response.
What I'm worrying is about (hack) thumb drives. As far as I know and to shorten it all, I know that if there is a password on the firmware level, thumb drives to bypass OS user password is impossible.
What's your opinion on that?
RE: How to protect UEFI even after CMOS settings reset? - webdev77 - Nov 2, 2018
(Nov 2, 2018 11:43 AM)Robert Downey Junior Wrote: Thank you for the response.
What I'm worrying is about (hack) thumb drives. As far as I know and to shorten it all, I know that if there is a password on the firmware level, thumb drives to bypass OS user password is impossible.
What's your opinion on that?
For typical use cases, a UEFI password is fine to prevent booting from external device.s
RE: How to protect UEFI even after CMOS settings reset? - Robert Downey Junior - Nov 2, 2018
(Nov 2, 2018 12:29 PM)webdev77 Wrote: For typical use cases,
What about intermediate use cases?
RE: How to protect UEFI even after CMOS settings reset? - webdev77 - Nov 2, 2018
(Nov 2, 2018 02:35 PM)Robert Downey Junior Wrote: What about intermediate use cases?
Get an OEM to issue a UEFI version without recovery options. You then run the risk of bricking your hardware.