Authors: Adam Gray cism

Date & Time

• 
  Check Set date & time automatically to synchronize your clock with one of Apple’s time servers.
  
• 
  If possible, you should change this server to a locally maintained one.
  

Software Update

• 
  Set the Check for Updates option to Daily.
  

To enable the system to remind users of pending updates no more than a day after they become available:

• 
  Check Download important updates in the background.
  

Apple has separated security updates from software updates. Most security updates will not require a restart. These should be applied those updates as soon as possible, even if you’re not connected to a network.

• 
  Manually checking for updates or use a third-party program or script to do it for you.
  

Speech

• 
  Leave Speakable Items off on the Speech Recognition page.
  

If Speakable Items must be used:

• 
  Select Listen only while key is pressed.
  

To prevent information leakage:

• 
  leave Announce when alerts are displayed.
  
• 
  Leave Announce when an application requires your attention unchecked.
  

Universal Access

• 
  Uncheck Enable access for assistive devices.
  

You can also prevent audible data leakage by:

• 
  Disabling VoiceOver on the Seeing pane.
  

Locking and Unlocking System Preferences

• 
  Choose one of the specific preferences sections like Security.
  
• 
  If the padlock icon at the lower left of the window looks unlocked, click it to close the lock.
  

To unlock System Preferences:

• 
  Choose one of the specific preferences sections like Security.
  
• 
  If the padlock icon at the lower left of the window looks locked, click it to open the lock.
  
• 
  Provide System Administrator credentials to unlock the preferences.
  

Note: In several different places in this checklist, you are asked to make changes within System Preferences. If the System Preferences are locked, many of the choices will either be grayed out, or may simply look different. It is also important to require a password to unlock each of the System Preferences. This is covered under the security section of this document.

Securing the System and the Data

Open Firmware and EFI Password

• 
  Restart your computer while holding down the Command, Option, O and F keys.
  
• 
  This will then load up the Open Firmware.
  
• 
  At the Open Firmware prompt type the following: >password
  
• 
  Then type in the password that you want to set, once you have entered the password you will be prompted to enter the same password again, this is done to make sure that you entered the password correctly.
  

This password can be up to eight characters in length, and you must not use the capital letter “U” in your password as this can cause problems (http://docs.info.apple.com/article.html?artnum=107666). Once the password is set you can enable the password feature. At the prompt then type the following to stop booting from any other devices without using the password that you specified:

• 
  >setenv security-mode command
  

The final step is to then type the following at the prompt to restart the computer:

• 
  > reset-all
  

For Intel Macs, setting an EFI password is similar. First, the steps above have you enable the features from within Open Firmware itself, prior to system boot. EFI has no features, at least that Apple has documented, so to manipulate the firmware password on Intel Mac computers, you install the Open Firmware Password Application. For versions of OS X prior to 10.4, you can download it from Apple’s web site. OS X 10.4 and beyond requires a newer version of the password application, and for some reason, Apple only provides it on the Software Installation Disc. Starting with OS X 10.5 the OS X installation disk must be used as the boot device to set the firmware password. The name of the application was changed to Firmware Password Utility:

• 
  Insert your OS X installation CD.
  
• 
  Reboot your computer.
  
• 
  Boot from the CD/DVD hold the letter C to accomplish this.
  
• 
  When the installation program comes up choose utilities out of the menu bar.
  
• 
  Select Firmware Password Utility.
  
• 
  Check the Require password to change firmware settings checkbox.
  
• 
  Type in the password in both the password and verify password fields.
  
• 
  Click OK.
  
• 
  Quit the Firmware Password Utility.
  
• 
  Reboot the computer and remove the installation disk
  

Note: When using a MacBook you should run the MacBook SMC Firmware Update on Apple’s site before make any firmware changes.