Encryption: Enable Encryption

Enable encryption:

1. BIOS

Currently, the most simple system password is the BIOS password. After the BIOS password is set, the computer will prompt you to enter the BIOS password every time you start the Windows operating system. Only after you enter the correct password can you start the Winodows system. If the password is incorrect, the hacker can only start or shut down the instance.

Start the computer and press the Del key to go To the BIOS settings page (the BIOS versions and operation interfaces vary depending on the motherboard. You can refer to the motherboard manual to set the BIOS ), select "bios features setup (BIOS feature settings)" and go to the sub-menu (1). Move the instruction bar to "Security Option, set the existing parameter to "System (password verification at startup )". Press ESC to return to the main menu, and then move the indicator bar to "supervisor password". Press enter to enter the PASSWORD. After setting the Super User Password, press F10 or move the instruction bar to "SAVE & exit setup (SAVE settings and exit bios program)". The system will prompt whether to SAVE the modification, press Y to restart the computer, and the password will take effect. In this way, the user will be asked for a password every time the computer starts from power-on. If the password is incorrect, the operating system cannot be started.

Figure 1

Tip: although the BIOS boot password takes effect before other programs are executed on the computer, it is highly secure. However, if the chassis is opened, the BIOS data (including the boot password information) can be easily cleared by discharging the battery that is responsible for BIOS power supply or removing the BIOS reset jumper ). Therefore, computers or servers with important data should be placed in data centers with high security performance. In addition, it is also a good way to lock the box lock on the chassis.

2. "encrypted" Optical Drive and second hard drive

In general, hard disks and optical drives are installed on our machines. Under some special conditions, we must lock them, such as locking the optical drive, to prevent others from using the optical drive to install software on our system, if we put some confidential information on the second hard disk, we can also lock the second hard disk.

Connect the second hard disk or optical drive to the second IDE port of the motherboard, start the computer, enter the BIOS settings interface, move the cursor indicator to "PNP, enter the PCI & onboard I/O entry, set OnBorad IDE-2 Controller (ONBOARD IDE2 Controller) to Disable, and press F10 to save and exit. Restart the computer. Open the "Resource Manager" window and you will find that all the devices mounted on the second IDE port of the motherboard are invisible! If you want to use them again, simply press Del at startup and enter BIOS to set OnBorad IDE-2 Controller to Enalbe (available )", press F10 to save the settings and restart the system.

Tip: for other device locking method and lock IDE-2 port, according to similar operations, we can lock the print port, serial port, USB and other computer ports, you don't have to worry about copying files on the machine or using a printer through a USB flash drive.