Windows 10: System firmware UEFI Admin Password

If you believe that no one has any reason to access your laptop when you are not around it, then, there is no need for one.

 

I am thinking about setting an Admin password for the UEFI firmware settings.
Is this really required?

BitLocker full drive encryption is enabled.


I have Secure Boot enabled, but what if my laptop gets stolen and someone can change the UEFI settings?


.So can I create the UEFI Admin password to be the same as my OS Admin password?
Would this pose an issue? My passwords are very complex.

Its very surprising to me that in most of security related forums out there, setting a UEFI Admin password is off the radar and not talked about so much...

:)

 

Restart and sleep issue in ASUS X450LCP Windows 10 Creators Update

Is there a BIOS or UEFI firmware update on the PC or motherboard's Support Downloads webpage? Compare with the present one installed at Start>Windows Admin Tools>System Information.

Type System Protection in Start Search, open System Restore, make sure it's enabled for C drive with plenty of disk space apportioned (10-15% normally).

 

Can I turn on BIOS without using power button?

Here are methods to access BIOS or UEFI firmware:

http://www.mydigitallife.info/comprehensive-lis...

http://www.isunshare.com/windows-password/four-...

I hope this helps. Feel free to ask back any questions and let us know how it goes. I will keep working with you until it's resolved.

 

Problem is if you set a password and forget it, you are screwed and may have to resort to elaborate physical methods to reset bios.

There is no real need to use a bios password unless you want to prevent users with PHYSICAL access to pc to change anything.

Remote users/hackers cannot modify the bios.

I guess it helps if laptop is stolen but even then most thieves would wipe drives anyway. You should not keep confidential details on a laptop if risk of theft is high where you take it.

 

Forgot to mention that I am the only one using my laptop and nobody else.

So will it be fine not to set an Admin UEFI password?

 

There's no real benefit of a UEFI admin password, which just prevents people from modifying your UEFI settings, if you are concerned about physical theft.

Secure Boot protects against attackers from modifying your OS boot files and surreptitiously installing malware or disabling OS protections. It's not even required for BitLocker, which uses a separate mechanism to validate the bootloader.

If someone steals your laptop then BitLocker (preferably with a PIN) is sufficient to protect your data.

 

Proper assessment of your security requirements is necessary before implementing a security solution. Always remember that there is a trade-off between the security you apply and the ease of use of your system.