If I loan out laptops to my employees to work remotely, such as Dr's, Nurses and other healthcare workers that generate sensitive information on patients, how can I remotely disable the laptop's ability to power on/charge?
Are there any motherboard interfaces that can help me achieve this?
I am already encrypting both drive and swap. We use Linux only.
Would it be possible to not finish the POST process without a fingerprint or unless a GSM module checks if the machine is on CRL first?
I don't want to just make the HD/SSD unaccessible I want the person who has stolen the laptop to not be able to sell it because it just won't power up or charge, ideally not even make any of the charging LED's emit light.
So in short I want it to become a brick unless it is unlocked by me.
How can I do this remotely?
I have looked into the IPMI interface but haven't seen any concrete ways to do this yet? Are there any other interfaces that exist on motherboards that can do this?