Appendix A: Disabling USB Ports for Security Purposes
IncertainenvironmentsitmaydesirabletodisableallUSBportstoprotectagainst
malicious(orinappropriate)intenttouploadsoftwareviaaUSBkeyfoborother
means.Thefollowingprocedurecanbeusedtodisabletheports.
BIOS Changes (1.2.2.0)
1. AttachaUSBkeyboardtoafrontUSBport.
2. Poweronthesystem.
3. PressDELtoaccesstheBIOSSetupUtility.
4. SelectChipsetSouth Bridge Configuration.
5. ChangethesettingforUSB2.0ControllertoDisabled.
6. Press[F10][Enter]tosavethechangesandreboot.
Windows Operating System changes
1. SelectControlPanelSystem Device Manager.
2. ScrolldowntoandexpandUniversal Serial Bus Controllers.
3. TherearefourIntelHostControllers.
• UniversalHostController‐27C8:ControlsUSBPortsAandB
• UniversalHostController‐27C9:ControlsUSBPortsCandD
• UniversalHostController‐27CA:ControlsUSBPortsEandF
• UniversalHostController‐27CB:
ControlsUSBPortsGandH(includesthe
FrontPanelport)
EachoftheUniversalHostControllerscanbedisabledtodisablethe
correspondingpairofports.Forexample:
1. HighlightIntel® N10/ICH7 Family USB Universal Host Controller -
27C8.
2. SelectActionDisabletodisableUSBportsAandB.Notethatyoumust
removeallUSBdevicesfrom
portsA/Bforthistowork.
Note: Portscanonlybedisabledinpairs,notindividually.