C
.
Appendix C: Disabling USB Ports for Security Purposes
IncertainenvironmentsitmaydesirabletodisableallUSBportstoprotectagainst
malicious(orinappropriate)intenttouploadsoftwareviaaUSBkeyfoborother
means.Thefollowingprocedurecanbeusedtodisabletheports.
BIOS Changes (1.2.2.0)
1. AttachaUSBkeyboardtoafrontUSBport.
2. Poweronthesystem.
3. PressDELtoaccesstheBIOSSetupUtility.
4. SelectChipsetSouth Bridge Configuration.
5. ChangethesettingforUSB2.0ControllertoDisabled.
6. Press[F10][Enter]tosavethechangesandreboot.
Windows Operating System changes
1. SelectControl PanelSystem Device Manager.
2. ScrolldowntoandexpandUniversal Serial Bus Controllers.
3. TherearefourIntelHostControllers.
UniversalHostController–27C8:ControlsUSBPortsAandB
UniversalHostController–27C9:ControlsUSBPortsCandD
UniversalHostController–27CA:ControlsUSBPortsEandF
Univers
alHostController–27CB:ControlsUSBPortsGandH(includesthe
FrontPanelport)
EachoftheUniversalHostControllerscanbedisabledtodisablethe
correspondingpairofports.Forexample:
1. HighlightIntel®N10/ICH7 Family USB Universal Host Controller – 27C8.
2. SelectActionDisabletodisableUSBportsAandB.Notethatyoumus
t
removeallUSBdevicesfromportsA/Bforthistowork.
Note: Portscanonlybedisabledinpairs,notindividually.