Q: How can I determine if this tool was used on my platform?Ī: Use of the recovery password can be detected, since its use results in the removal the applicable BIOS password s (Admin/System, or BIOS-managed HDD). So, physical protection of the platform should always be practiced. Q: Can this tool be used remotely to reset my passwords?Ī: No, a user must be physically present at the system to use the recovery password. The platform will be unrecoverable, and the motherboard or hard drive will need to be replaced. Warning: If the Master Password Lockout option is selected and the customer subsequently forgets the password, Dell will not be able to assist in the recovery of passwords. A user must be physically present at the system to use the recovery password.( Available on systems produced on or after 2011) Once enabled, the Admin, System, and HDD passwords are protected from being reset using recovery password. Q: How can I protect my platform from an unauthorized password reset?Ī: There are several mitigations and best practices customers should follow to help protect their platforms. Any platform that displays the following identifiers on the BIOS Preboot password prompts (Dell Security Manager)
See Dell’s Security Advisory for more details: Ī: This affects most Dell Client Commercial systems and select Consumer systems.
Customers can also choose to enable the Master Password Lockout feature from BIOS Setup (available on platforms from 2011) to protect Admin, System, and HDD passwords are protected from being reset. We recommend customers follow security best practices and prevent unauthorized physical access to devices. Dell provides several mitigations and limitations to the use of unauthorized reset passwords on commercial platforms.
0 kommentar(er)
