Sophos SafeGuard Disk Encryption 4.60
Windows 2000 Professional SP4, Windows XP SP3
Can Pre-Boot Authentication (PBA) be deactivated ?
Yes, the Pre-Boot Authentication (PBA) can be deactivated by the administrator.
- The "Password at System start" option in the Sophos SafeGuard Disk Encryption Administration switches Pre-Boot-Authentication (PBA) on/off. If PBA is switched on, a logon screen is displayed before the operating system is loaded. Windows does not boot until after successful authentication with the correct Sophos SafeGuard Disk Encryption access data.
- If you switch off Pre-Boot Authentication, no logon is necessary before the system boots. Authentication uses then the familiar existing operating system functions (GINA).
- For temporary deactivation of PBA, Sophos SafeGuard Disk Encryption supports also the so-called secure Wake On LAN mode (see user manual for details)
For security reasons Sophos recommends always to use Sophos SafeGuard Disk Encryption with active Pre-Boot Authentication.