Big Security Risk with F8 Boot Menu (Asus Motherboard).

securesystem

Junior Member
Sep 13, 2006
1
0
0
Hi all, I recently purchase an Asus motherboard model M2NPV-MX and updated to the latest BIOS. Do note that this problem could also affect other Asus?s motherboard model as well as other branded motherboard.

So my problem is the company that I work for is planning to put this computer in a public area so security is paramount. I discover that by pressing the F8 key (could be different key on other brand), a menu will appear allowing me to choose which boot device I want to boot from. The problem is that any user can come physically near the computer and plug a USB pen drive (with OS) at the back of the computer, restart the computer, press the F8 key and boot from the USB (without password validation). Once successful, the user can then run programs to steal data, format the hard disk, etc...

The BIOS password and the user password is in place, However the password is only required when entering the BIOS setup menu. Having the computer requiring a password every time the computer starts is NOT suitable.

In most circumstances, having the F8 option is great as it allow a convenient way to select which device I want to boot from. However in my circumstances, I want to DISABLE this feature or at least have password validation required to access it.

I have look into the BIOS option without any success. Please help me. Thanks!
 

Peter

Elite Member
Oct 15, 1999
9,640
1
0
Proper solution: Disable detection/support for those boot media you do not wish to show up in that menu. For USB drives and sticks, disable "USB Mass Storage support", and they won't show up in that boot popup menu anymore either.