giobaxx
2 Bronze

XPS 8910, disabling USB Boot

Jump to solution

For security reason we would need to disable the boot from USB from BIOS but from what i have understood in modern bios is not possible. In the BIOS of our XPS 8910 i didn't find any option to do it, and you can do very few things compared old bios where you could set a lot of options (enable/disable wifi, usb, boot from usb.......) Is there a way to do it or do I have to give up? Just to understand could you tell me which is the difference between Admin Password, System Password and HDD Password? Tanks a lot

0 Kudos
1 Solution

Accepted Solutions
Vic384
4 Beryllium

Re: Disabling USB Boot for XPS 8910

Jump to solution

In the BIOS, according to the service manual, there is a USB Configuration section where there are options to enable or disable the Front USB Ports and the Rear USB Ports.

As for the passwords, I am not 100% sure:

System password - prevents the system from booting unless the password is entered

Admin password - allows entry into the BIOS

HDD password - allows assess to the HDD, does not encrypt the HDD, but I believe may prevent it from working if removed and installed in another system unless you know the password

View solution in original post

0 Kudos
7 Replies
Vic384
4 Beryllium

Re: Disabling USB Boot for XPS 8910

Jump to solution

In the BIOS, according to the service manual, there is a USB Configuration section where there are options to enable or disable the Front USB Ports and the Rear USB Ports.

As for the passwords, I am not 100% sure:

System password - prevents the system from booting unless the password is entered

Admin password - allows entry into the BIOS

HDD password - allows assess to the HDD, does not encrypt the HDD, but I believe may prevent it from working if removed and installed in another system unless you know the password

View solution in original post

0 Kudos
giobaxx
2 Bronze

Re: Disabling USB Boot for XPS 8910

Jump to solution
Tanks for your reply! I suppose we can not do much with the bios of the XPS, or Disable USB completely or Nothing. The Aptio setup Utility of these Dell is not so customizable. We have some new Precision 3420 that have the "classic" Dell BIOS where the configuration can be made in every detail, IE enabling adnd disabling USB boot Support... Tanks the the Help GIO
0 Kudos
7- Thorium

Re: Disabling USB Boot for XPS 8910

Jump to solution
That's one of the differences between a home/consumer PC like the XPS 8910 vs a business oriented Precision model

If you don't want users to be able boot from USB, you probably also don't want users to boot from a bootable CD/DVD (assuming you have an optical drive) or from a bootable SD card in the card reader. So you may have even more security issues than you thought...

Ron

   Forum Member since 2004
   I am not a Dell employee

0 Kudos
7- Thorium

Re: Disabling USB Boot for XPS 8910

Jump to solution
Couldn't edit my last post... :Huh:

You could put the PC in a locked cabinet where users don't have any access to the USB ports, card reader or optical drive without the key.

To turn the PC on and boot, you could set BIOS to turn on automatically each day at a set time, if access to the power button is blocked in the cabinet. Or disable the front USB ports and only enclose the rear of the PC in a locked cabinet.

Another option is connect PC to a power strip with its own on/off switch. Set BIOS to boot automatically when recovering from a power failure and have user(s) turn off power strip after shutting Windows down normally. To boot, just turn the power strip on and...voila

I have my PC, monitor, etc connected to the same strip. Turning the strip on makes PC boot and powers on all the other devices with just the one switch. Just make sure the strip has the capacity to handle the load from the PC and whatever else is connected. (And yes, I'm lazy!)

Ron

   Forum Member since 2004
   I am not a Dell employee

0 Kudos
Tesla1856
6 Thallium

Re: Disabling USB Boot for XPS 8910

Jump to solution

@RoHe wrote:
That's one of the differences between a home/consumer PC like the XPS 8910 vs a business oriented Precision model



Or OptiPlex/Latitude.


Registered Microsoft Partner and Apple Developer
- Like many of you, I can appreciate a good game-engine.
- I answer questions here, but I'm not a Dell employee.
- Consider giving posts you like a "thumbs-up"
- Posting models-numbers and software versions speeds trouble-shooting.
- Click "Accept as Solution" button on any post that answers your question best.
0 Kudos
Hamadafigo
1 Copper

Re: XPS 8910, disabling USB Boot

Jump to solution
 
0 Kudos
savvy2
4 Beryllium

Re: XPS 8910, disabling USB Boot

Jump to solution

consumer grade PC (with brick dumbb bios)

but if was w8 ready , turn on secureboot and all that is cured, only HDD0 boots. or SSD#0)

did you upgrade the bios first and see if you get new bells and whistles to fiddle?

Version: 1.1.8 , ?

at least v1.16, has huge fixes ….. related to UEFI, so it says. clear as day.

the manual on your PC is stamped 2014, so would not UEFI full BLOWN security be there?

so installed the OS with FULL UEFI, now usb can not boot. in secure boot mode.

next is hdd ,  not sure how this works but , only the CIA does this right>?"  (if you forget the PW then all  is lost, does that sound like fun?)

or use bitlocker, or use drive encryption in the drives itself if in the CIA mode. 

"Hard drive encryption and a hard drive password are two separate things.  Putting a password on the drive doesn't encrypt it -- that requires a  utility to do (it's done under Windows).

 

https://www.dell.com/community/Laptops-General-Read-Only/Dell-XPS-15-95602-HDD-password-in-BIOS/td-p...

 

I am not Dell, I am retired from this industry since 2009,
0 Kudos