HP PC Commercial BIOS (UEFI) Setup Administration Guide For Commercial Platforms using HP BIOSphere Gen 3-5 2016 -2019 Technical Whitepaper

HP PC Commercial BIOS (UEFI) Setup
June 2019
919946-004
© Copyright 2016-2019 HP Development Company, L.P.
4 Security Menu 27
4.9 DriveLock/Automatic DriveLock Menu
DriveLock prevents unauthorized access to the contents of a selected hard drive. Enter a password to access the drive and
the drive is accessible only when attached to a PC.
NOTE: DriveLock states cannot change after a warm reboot. Power off the system and then boot directly to the BIOS setup
to access these menus. The DriveLock Master and User passwords cannot be changed if you enable Automatic DriveLock.
Table 17 DriveLock Menu features
Feature
Type
Description
Default
Notes
 Automatic
DriveLock
Setting
This feature is intended to prevent someone from accessing data on
your drive after they have physically removed it from your system. A
BIOS administrator password is required for this feature.
When this feature is enabled, the BIOS sets a randomly generated user
password, sets the master password with the BIOS administrator
password, and marks the drive as a member of an Automatic DriveLock
group.
Thereafter, the BIOS automatically unlocks the drive while it is attached
to the its host system. If the drive is physically removed from its host
system and attached to another system, the user is prompted for the
DriveLock password. The user must provide the BIOS administrator
password from the original host system to access the drive.
Disable
Power cycle
required.
Not supported
for M.2 NVMe
drives.
Set DriveLock
Master
Password
Setting
Password to disable or access a hard drive with DriveLock protection.
Power cycle
required.
Not supported
for M.2 NVMe
drives.
Enable
DriveLock
Setting
Enables DriveLock protection and creates a user password distinct from
the master password that allows access to the hard drive
Disable
Power cycle
required.
Change
DriveLock
User
Password
Action
Displayed only if DriveLock is enabled and a valid password was
supplied at the DriveLock POST prompt. Allows the user password to be
changed when selected.
Power cycle
required.
Change
DriveLock
Master
Password
Action
Displayed only if DriveLock is enabled and a valid password was
supplied at the DriveLock POST prompt. Allows the master password to
be changed when selected.
Power cycle
required.
Not supported
for M.2 NVMe
drives.
Disable
DriveLock
Setting
Displayed only if DriveLock is enabled and a valid password was
supplied at the DriveLock POST prompt. Allows DriveLock to be disabled
when it is enabled.
Power cycle
required.