Reference Guide

Table 1. Security profiles
Security feature Low Security
Profile
Medium Security Profile—This profile
is enabled by default.
High Security Profile
Default Firejail profile for
third-party unsigned Debian
applications.
Disabled Disabled Enabled only if the metadata
is provided with high granular
settings defined.
Firewall support through
Uncomplicated Firewall
(UFW)
Disabled Disabled Enabled
Kernel and operating system
hardening.
Disabled Disabled Enabled
Developer tools for browsers. Enabled Disabled Disabled
Profile Manager for Firefox. Enabled Disabled Disabled
*For information about the metadata format, see the Dell Hybrid Client Version 1.x Administrator's Guide at www.dell.com/
support.
USB device security
Dell Hybrid Client enables you to configure and manage the USB devices that are connected to your device. You can block
access to USB devices, making them inaccessible from the client. The USB Lockdown settings can be configured using Wyse
Management Suite. The feature is applicable only for device policy groups.
For more information about how to configure the USB lockdown settings, see the Dell Hybrid Client Version 1.x Administrator's
Guide at www.dell.com/support.
GRUB password security
GRUB is the default boot loader for Dell Hybrid Client. Dell Hybrid Client enables you to set a password for the GRUB boot
menu to restrict access to the GRUB boot menu. The GRUB password is unique to each device. As a Wyse Management
Suite administrator, you can view the GRUB password from the More Actions drop-down list on the Devices page on the
Wyse Management Suite console. As a Wyse Management Suite administrator, you must change the GRUB password after you
register the device for the first time. Changing the default GRUB password is mandatory for the device to be compliant.
For more information about how to set the GRUB password, see the Dell Hybrid Client Version 1.x Administrator's Guide at
www.dell.com/support.
BIOS password security
As a Wyse Management Suite administrator, you must change the default BIOS password by using Wyse Management Suite.
The following table lists the default BIOS password for each platform:
Table 2. Default BIOS password
Platform name Default BIOS password
Wyse 5070
Fireport
OptiPlex 7070 Ultra Not applicable
OptiPlex 3090 Ultra Not applicable
OptiPlex 7090 Ultra Not applicable
Latitude 3320 Not applicable
For more information about how to set the BIOS password, see the Dell Hybrid Client Version 1.x Administrator's Guide at
www.dell.com/support.
Security quick reference
7