Mac OS X | Open Firmware Passwords: 'Power On Protection'
Friday, November 11 2005 @ 08:15 PM SGT
Contributed by: Mack
Because Max OS X facilitates the use of modifier keys that enable Mac users to boot up from alternative sources, or in FireWire Target Disk mode, it may be necessary as an additional line of defence against would be intruders, to implement an open firmware password.
In a scenario where an intruder gains physical access to your Mac and engages FireWire Target Disk mode, all security defenses attributed to Mac OS X is defeated and the user is given full access to your Mac's hard drive. Similar to a typical PC BIOS password protection feature, this feature in Apple's implementation of Open Firmware allows you to password protect your computer's ability to boot. Even zapping the PRAM or even TechTool's "complete zap", will not disable or remove the password protection.
Previously, the only means to engage the Open Firmware password was to boot your Mac OS X in Open Firmware mode and type lines of code instructing its activation. However, recently Apple has released downloads for both Mac OS X 10.1 - 10.3.9 and Mac OS X 10.4, that uses an Open Firmware application to make enabling/disabling Open Firmware password protection an integrated feature of Mac OS X.
Mac OS X 10.1 to 10.3.9 -- Download and Install the Open Firmware Password application from this page.
Mac OS X 10.4 or later -- you must use the updated version that can be copied from the software installation disc; located at /Applications/Utilities/ on the disc (see: Diagram 1.0).
Diagram 1.0, Drag n drop the Open Firmware Password application from your Mac OS X 10.4 installation disk /Applications/Utilities folder
After all that is said and done, the best security precaution users can take is to restrict physical access to their Mac systems. This is the first tenant of good data security. Open Firmware password protection are for those moments where unauthorised startup of your Mac may occur and is especially cogent for roadwarriors and their Mac portables.
For your convenience you can also download copies of the Open Firmware Password Protection applications from our Downloads page.
Related Articles:
Enabling the Open Firmware password protection feature is done so at your own risk; the author of this article and/or MacRiot will NOT be held accountable or responsible for whatever you do. Changes to Open Firmware that have not been explicitly endorsed by Apple may damage your computer's logic board. Any repairs that are necessary because of this damage would not be covered under the terms of the Apple One-Year Limited Warranty, AppleCare Protection Plan, or other AppleCare agreement.
0 comments
http://www.macriot.com/article.php/20051111122951127