I'm trying to understand if the old school ways of bypassing a BIOS password (flip the BIOS jumper or remove the CMOS battery) still affect (some or all) modern UEFI?
If not, what protections do modern UEFI implement that prevent it?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
I can't remember the last time I worked on a system where a CMOS battery pull reset the password. Of course, password reset jumpers or manufacturer override codes are features, and you can expect UEFI to have all the features BIOS had and then some.
Remember, though, that BIOS passwords aren't that powerful. They protect against someone with physical access to the keyboard and screen, but will fail against anyone with physical access to the machine itself. If you want to keep your data safe, you need full disk encryption controlled by a TPM and measured boot.