Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Tech Computing Computer Hardware › How to protect UEFI password even after CMOS settings reset?

New Reply 

How to protect UEFI password even after CMOS settings reset?
Robert Downey Junior
Robert Downey Junior Offline
[user@HF:]
*
Registered
Posts:
186
Threads:
32
Credibility:
000
Popularity:
-5
βytes:
β 0
Game XP:
0
Nov 2, 2018 10:26 AM (This post was last modified: Nov 2, 2018 10:32 AM by Robert Downey Junior.)
Is there such a thing? Password-wise.
I've set supervisor and user password for my UEFI configuration, and want to make it so that even after resetting the jumper or CMOS battery, the password still stays.
Is there such an option?
Google doesn't give me the answer, so I think it must be something very silly for me not to be able to figure it out on my own.
webdev77
webdev77 Away
[g0d@HF:]
******
HF Ub3r
Posts:
26,305
Threads:
586
Credibility:
5100
Popularity:
3,245
βytes:
β 214.36
Game XP:
250,001
Nov 2, 2018 10:37 AM
Most motherboards have built in reset passwords that you can't get rid of. The only requirement is that you can change the clock to a certain date and time which then matches to a specific reset password. A handy trick to get past passwords. Worst case, hardware flashing is an option but requires the right tools to do so. Long story short, don't worry about your UEFI passwords if someone has physical access to your machine.
Robert Downey Junior
Robert Downey Junior Offline
[user@HF:]
*
Registered
Posts:
186
Threads:
32
Credibility:
000
Popularity:
-5
βytes:
β 0
Game XP:
0
Nov 2, 2018 11:43 AM
(Nov 2, 2018 10:37 AM)webdev77 Wrote:  Most motherboards have built in reset passwords that you can't get rid of. The only requirement is that you can change the clock to a certain date and time which then matches to a specific reset password. A handy trick to get past passwords. Worst case, hardware flashing is an option but requires the right tools to do so. Long story short, don't worry about your UEFI passwords if someone has physical access to your machine.

Thank you for the response.
What I'm worrying is about (hack) thumb drives. As far as I know and to shorten it all, I know that if there is a password on the firmware level, thumb drives to bypass OS user password is impossible.
What's your opinion on that?
webdev77
webdev77 Away
[g0d@HF:]
******
HF Ub3r
Posts:
26,305
Threads:
586
Credibility:
5100
Popularity:
3,245
βytes:
β 214.36
Game XP:
250,001
Nov 2, 2018 12:29 PM
(Nov 2, 2018 11:43 AM)Robert Downey Junior Wrote:  Thank you for the response.
What I'm worrying is about (hack) thumb drives. As far as I know and to shorten it all, I know that if there is a password on the firmware level, thumb drives to bypass OS user password is impossible.
What's your opinion on that?

For typical use cases, a UEFI password is fine to prevent booting from external device.s
Robert Downey Junior
Robert Downey Junior Offline
[user@HF:]
*
Registered
Posts:
186
Threads:
32
Credibility:
000
Popularity:
-5
βytes:
β 0
Game XP:
0
Nov 2, 2018 02:35 PM (This post was last modified: Nov 2, 2018 02:35 PM by Robert Downey Junior.)
(Nov 2, 2018 12:29 PM)webdev77 Wrote:  For typical use cases,

What about intermediate use cases?
webdev77
webdev77 Away
[g0d@HF:]
******
HF Ub3r
Posts:
26,305
Threads:
586
Credibility:
5100
Popularity:
3,245
βytes:
β 214.36
Game XP:
250,001
Nov 2, 2018 04:30 PM
(Nov 2, 2018 02:35 PM)Robert Downey Junior Wrote:  What about intermediate use cases?

Get an OEM to issue a UEFI version without recovery options. You then run the risk of bricking your hardware.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by isshakrenaneJun 15, 2022 09:28 PM 1 327 Jun 15, 2022 09:28 PM
Last Post: SkriptKiddie11
by Toretto CMPAug 30, 2019 04:37 AM 3 157 Aug 30, 2019 04:37 AM
Last Post: Lib
by Nakura TodakaApr 10, 2018 10:26 AM 6 110 Apr 10, 2018 10:26 AM
Last Post: Nakura Todaka