Mac’s Open Firmware Password application is used for added security to Mac OS X . Open Firmware Password Protection is turned off by default so this article will walk you through turning it on, and setting a strong password.
Make sure your computer is one of the following with Mac OS X. The following firmware configuration is supported on:
- All Intel-Based Macintosh Computers
- iMac (Slot Loading) and later models of G3 iMac
- iMac (Flat Panel) and later models of G4 iMac
- iMac G5 and later models of G5 iMac
- iBook – all models, both G3- and G4-based
- eMac – all models
- PowerBook (FireWire)
- PowerBook G4 and later models of G4 PowerBook
- Power Mac G4 (AGP Graphics) and later models of G4 Power Mac
- Power Mac G4 Cube – all models
- Power Mac G5 and later models of G5 Power Mac
Open Firmware password protection disables the following features:
- Depressed N-key boot – Boot from NetBoot server
- Depressed T-key boot – Boot in Target Disk Mode
- Depressed C-key boot – Boot from CD/ DVD or other designated optical drive
- Command V boot – Boot in Verbose Mode
- Command S boot – Boot Single User Mode
- Command+Option-P-R Combination boot – PRAM Reset
- Command+Option-O-F Combination boot – Use of Open Firmware Interface commands without a password. – Not available on Intel-based Macs
- Option key boot – Use of Startup Manager without a password
Enabling the Open Firmware Password
Obtaining the Software
Mac OS X 10.4 and higher
Download the Open Firmware Password Application from here: Open Firmware Password.
Mac OS X 10.1 – 10.3.9
The Open Firmware Password Application Utility is located in the /Applications/Utilities/ folder on your Mac OS X installation DVD. Please copy it to your machine.
Configuration
- Launch the Open Firmware Password Application.
- Click the authentication icon and enter your Administrator credentials. You will be prompted for a password.
- Locate and click the Change button.
- This will launch an Open Firmware Password window.
- In the Open Firmware Password window, locate and click to select/check the “Require password to change Open Firmware settings” option.
- Enter your Administrator password.
- Retype your Administrator password in the box entitled Verify.
- Click the OK button to commit your password and password verification information. This will prompt a confirmation window.
- Locate and re-select the lock icon.
Warning: Altering Open Firmware configuration in a manner that is not explicitly endorsed by Apple may damage machine’s logic board. Repair’s for issues created by these unsupported configuration changes are not covered under the terms of any of the Apple support agreements.
Warning: Please reselect your startup device PRIOR to resetting your PRAM or Open firmware.
Tips:
Once Open Firmware Password is on the Mac will always startup with the setting from the Startup Disk System Preference or Control Panel. The only way to bypass startup is to hold the “option” key, which will prompt you for the Open Firmware Password. Enter the correct password and you will be allowed to choose another startup volume.
The Open Firmware Password is almost hack-proof, but there is a back door. If you change the amount of physical RAM and double zap the P-RAM by holding “command-option-p-r” at startup till you hear three chimes, you can nix the Open Firmware Password. Basically, you are proving to the machine you have physical access to the system, therefore you should be allowed in. Let’s face it; if someone has enough time to take out some RAM, they might as well just yank the hard drive.
Responses to “Enable Firmware Password Protection in Mac OS X”
Leave a Reply