Setup guide

UNCLASSIFIED
UNCLASSIFIED
50
Chapter 4 –
Configuring System Settings
4. At the next prompt, enter:
setenv security-mode command
5. To restart the computer and enable the settings, enter the command:
reset-all
6. The system should reboot into the Mac OS X Login Window.
In command mode, the system will boot from the boot device specified in the
system’s boot device variable and disallow users from providing any boot arguments.
To test that the system has been put into command mode as recommended:
1. Close all applications and choose Restart from the Apple menu.
2. A confirmation window will pop up. Continue restarting the machine by
selecting the Restart button.
3. Hold down the key combination command-S while the machine boots.
4. If command mode has been set correctly, the machine will continue booting
into the Mac OS X Login Window. Normally, holding down the command-S
key combination during a reboot would cause the machine to reboot into
single-user mode.
5. If the system did reboot into single-user mode, restart the system by issuing
the command reboot. Then repeat the previous steps for putting the system
into command mode.
Open Firmware protection can be violated if the user has physical access to the
machine. Open Firmware password protection can be bypassed if the user changes
the physical memory configuration of the machine and then resets the PRAM 3 times
(holding down command-option-P-R during boot).
An Open Firmware password will provide
some protection, however, it can be
reset if a user has physical access to the
machine and can change the physical
memory configuration of the machine.
The following Apple Knowledge Base articles discuss the Open Firmware password:
1) Title: Setting up Open Firmware Password protection in Mac OS X
10.1 or later; Article ID: 106482; URL:
http://docs.info.apple.com/article.html?artnum=106482