home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Media Share 9
/
MEDIASHARE_09.ISO
/
utility
/
ccp10b.zip
/
CCP10B.DOC
< prev
next >
Wrap
Text File
|
1992-10-05
|
14KB
|
441 lines
CONFIGURATION & CONTROL PROGRAM Version 1.00B
Copyright 1992 by McAfee Associates.
All Rights Reserved.
Documentation by Aryeh Goretsky
McAfee Associates, Inc. (408) 988-3832 office
3350 Scott Blvd, Bldg. 14 (408) 970-9727 FAX
Santa Clara, CA 95054-3107 (408) 988-4004 BBS
USA USR HST/v.32/v.42bis/MNP1-5
CompuServe GO MCAFEE
Internet support@mcafee.COM
TABLE OF CONTENTS
SYNOPSIS . . . . . . . . . . . . . . . . . . . . . . . . . 2
- What is the Configuration & Control Program (CCP)
- System requirements
AUTHENTICITY . . . . . . . . . . . . . . . . . . . . . . . 3
- Verifying the integrity of CCP
OVERVIEW . . . . . . . . . . . . . . . . . . . . . . . . . 4
- General description of CCP
INSTALLATION and OPERATION . . . . . . . . . . . . . . . . 5
- Detailed description of CCP's options
CCP EXTRA PRECAUTIONS. . . . . . . . . . . . . . . . . . . 7
- Back up system before installation
- Back up CCP restore disks
- Disable caching hard disk controllers before installation
Page 1
CCP Version 1.00B Page 2
SYNOPSIS
The Configuration Control Program (CCP) is a system access,
boot, and configuration control program for MS-DOS and PC-DOS
based systems. CCP provides secure access, boot protection,
configuration locking, and optional hard disk password
protection.
The CCP installation program installs a new master boot
record (MBR or partition table) on the hard disk. The original
MBR is copied to a hidden file on the hard drive and to a
floppy diskette for recovery purposes.
The new MBR prevents access to the hard disk when the
system is booted from a diskette, password-protects the hard
disk on boot-up, and/or prevents booting if changes have been
made to the CONFIG.SYS or AUTOEXEC.BAT files without supervisor
approval -- a feature for standardizing configurations in
corporate environments. The supervisor selects which features
the new MBR will have.
CCP Version 1.00 works on any system with 512Kb of
memory and DOS 3.3 or greater. One floppy disk is required
for each system CCP is installed on. CCP is not compatible
with DOS 2.nn systems, systems partitioned with a third-party
disk partitioning program such as SpeedStor or Disk Manager, or
systems with a 'dual boot' partition, such as DOS-Unix or
DOS-OS/2. It is not compatible with DR-DOS.
Version 1.00B checks for the use of some Disk Compressor
to prevent conflicting use of the disk interrupts, and operates
integrity checking before restoring the original partition
from the backup disk.
CCP Version 1.00B Page 3
AUTHENTICITY
CCP is packaged with the VALIDATE program to ensure the
integrity of the CCP files. The VALIDATE.DOC file tells how
to use VALIDATE. VALIDATE can be used to check subsequent
versions of CCP for tampering.
The validation results for Version 1.00B should be:
FILENAME SIZE DATE CHECK METHOD
CCP.COM S:9,499 D:07-21-92 M1: E5E3 M2: 17FC
CCP.MBR S:39,265 D:09-29-92 M1: 5395 M2: 07F1
If your copy of CCP differs, it may have been damaged (or the
CCP.MBR file may have been pre-configured by the system
administrator). Always obtain CCP from a known source, such as
McAfee Associates, its Agents, or the person responsible for
computer security in your organization. The latest version of
TCM and validation data for its programs can be obtained from
McAfee Associates' bulletin board system at (408) 988-4004, from
McAfee Virus Help Forum on CompuServe (GO MCAFEE), or by
anonymous ftp from the mcafee.COM site on the Internet.
All of McAfee Associates' programs have been archived
with PKWare's PKZIP Authentic File Verification. If you do
not see an "-AV" after every file is unzipped and receive
the "Authentic Files Verified! # NWN405 Zip Source: McAFEE
ASSOCIATES" message then do not use them.
If your version of PKUNZIP does not have verification
ability, then this message may not be displayed. Please
contact us if you believe tampering has occurred to the .ZIP
file.
CCP Version 1.00B Page 4
CCP OVERVIEW
CCP installs a custom Master Boot Record (partition table)
onto the first five sectors on the hard disk, an area of the
disk that typically remains unused.
The MBR installed by CCP can be configured to perform
several functions: It can prevent access to the hard disk when
the PC is booted from a floppy, prompt the user for a password
when the system is booted from the hard disk, and lock the
system when changes have been made to the CONFIG.SYS and
AUTOEXEC.BAT files.
The MBR will also prevent accesses to the first five (5)
sectors of the hard disk which contain its code. Access to
this area while CCP is active will show the original (pre-CCP
installation) MBR. CCP will prevent any changes from being
made to this part of the disk.
NOTE: When CCP's custom MBR is installed and running, it will
reduce the amount of total conventional memory available
to the system by 1,024 bytes. Thus, a system with 640Kb
of memory (655,360 bytes) will report that it has 639Kb
of memory (654,336 bytes) available.
When CCP is installed, it will save the original MBR to
a floppy diskette as a backup. The floppy disk should be
clearly labeled as a CCP RECOVERY DISKETTE and write protected.
Be sure to write the user's name, department, PC serial number
and any other important information on the label. CCP will
also create a hidden file in the root directory of the disk
containing the first five sectors of the hard disk. The file
is named ▒≡DISK≡▒.IDN.
NOTE: Do not install or run CCP while disk caching software or
hardware is in use. CCP performs direct writes to the hard
disk which may not be handled correctly by disk caching
algorithms. Use of disk caches while installing CCP via
the CCP.COM program may result in the loss of all data on
the hard disk. Disk caches can be used AFTER CCP has
been installed, reconfigured, or removed.
CCP Version 1.00B Page 5
CCP INSTALLATION and OPERATION
NOTE: If MCONFIG and CCP are to be used together, then MCONFIG
must be installed first. Please refer to the MCONFIG or
TCM manual for more information.
To install CCP onto your hard disk, run the CCP.COM
program. The main menu will appear. Main menu items are:
Set Access - Configure CCP's functions
Install - Install (or reinstall) CCP
Recover - Restore CCP after virus infection or disk crash
Remove - Remove CCP from hard disk
Exit - Save configuration and return to DOS
SET ACCESS
Selecting 'Set Access' brings up the 'Access Password' and
'Configuration' items.
'Access Password' selects and changes the SuperUser's
(system administrator) password. After selecting a SuperUser
password, be sure to write it down and store it in a safe
location. The SuperUser password is required to reconfigure
CCP.
Selecting 'Configuration' brings up the Configuration
menu. This menu allows you to select which items require
SuperUser approval. Configuration Selection Menu items are:
Recover hard disk protection
Remove hard disk protection
(Re)Install hard disk protection
Set boot password
Move between options with the cursor keys. Select options with
the space bar. Options that have been selected will have a
check-mark (ASCII 251) character in front of them. All selected
items will be set as "unavailable" to end users. The SuperUser
password will be required to gain access to these functions.
INSTALL
Selecting 'Install' brings up the 'Available Options' menu.
This menu allows you to select which items the CCP MBR is
installed with. Available Options menu items are:
Require password to boot the operating system
Check CONFIG.SYS and AUTOEXEC.BAT at system boot
Prevent access to hard disk if system booted from floppy disk
Selecting 'Require password...' allows the user to select a
password that will be requested by CCP each time the system is
booted from the hard disk.
CCP Version 1.00B Page 6
NOTE: The 'Require password to boot the operating system' item
appears only if 'Set Boot Password' is not restricted by
the Set Access menu.
Selecting 'Check CONFIG.SYS and AUTOEXEC.BAT at system
boot' enables a check of the CONFIG.SYS and AUTOEXEC.BAT files
when the system is booted from the hard disk. Any changes made
to these files will result in the message
AUTOEXEC.BAT and/or CONFIG.SYS has been modified.
Enter SuperUser password.
being displayed when the system is booted. The hard drive will
be locked until the SuperUser enters the password and reinstalls
CCP or replaces the original configuration files.
Selecting 'Prevent access to hard disk if system booted
from floppy disk' disables access to the hard disk when the
system is booted from a floppy. Attempts to access the hard
disk will result in an "Invalid Media Specification" error
being displayed.
RECOVER
Selecting 'Recover' allows you to restore CCP after a disk
crash or virus infection that has corrupted the Master Boot
Record. After selecting 'Recover' CCP will prompt the user to
insert the CCP MBR recovery disk to reload the CCP MBR from.
When finished, CCP will reboot the system.
REMOVE
Selecting 'Remove' allows you to unload CCP from the hard
disk and restore the original Master Boot Record. After
selecting 'Remove', CCP will restore the original MBR and
reboot the system.
EXIT
Selecting 'Exit' allows you to return to DOS. If CCP has
been reconfigured, it will prompt the user to save changes
before exiting.
CCP Version 1.00B Page 7
CCP EXTRA PRECAUTIONS
BACK UP
Before installing CCP, it is recommended that the system be
backed up. After installing CCP, it is recommended that one or
more backup copies of the CCP recovery diskette be made and
stored in a safe location. The DOS DISKCOPY command can be used
to make copies of CCP MBR backup diskettes.
NOTE: The CCP recovery diskette will appear unreadable to
normal DOS programs, including the DIR command. Only
CCP can access the diskette.
CACHING HARD DISK CONTROLLER CARDS
If you are installing CCP on a PC equipped with a caching
hard disk controller card, it is recommended that you disable
the disk cache before installing CCP. After CCP has been
installed, the disk cache can be returned to normal operation.