home *** CD-ROM | disk | FTP | other *** search
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- CONFIGURATION & CONTROL PROGRAM Version 1.1
- Copyright 1992 by McAfee Associates.
- All Rights Reserved.
-
- Documentation by Aryeh Goretsky
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- McAfee Associates, Inc. (408) 988-3832 office
- 3350 Scott Blvd, Bldg. 14 (408) 970-9727 FAX
- Santa Clara, CA 95054-3107 (408) 988-4004 BBS
- USA USR HST/v.32/v.42bis/MNP1-5
- CompuServe GO MCAFEE
- Internet support@mcafee.COM
-
-
-
-
-
-
- TABLE OF CONTENTS
-
- SYNOPSIS . . . . . . . . . . . . . . . . . . . . . . . . . 2
- - What is the Configuration & Control Program (CCP)
- - System requirements
-
- AUTHENTICITY . . . . . . . . . . . . . . . . . . . . . . . 3
- - Verifying the integrity of CCP
-
- OVERVIEW . . . . . . . . . . . . . . . . . . . . . . . . . 4
- - General description of CCP
-
- INSTALLATION and OPERATION . . . . . . . . . . . . . . . . 5
- - Detailed description of CCP's options
-
- CCP EXTRA PRECAUTIONS. . . . . . . . . . . . . . . . . . . 7
- - Back up system before installation
- - Back up CCP restore disks
- - Disable caching hard disk controllers before installation
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- Page 1
-
- CCP Version 1.1 Page 2
-
-
- SYNOPSIS
-
- The Configuration Control Program (CCP) is a system access,
- boot, and configuration control program for MS-DOS and PC-DOS
- based systems. CCP provides secure access, boot protection,
- configuration locking, and optional hard disk password
- protection.
-
- The CCP installation program installs a new master boot
- record (MBR or partition table) on the hard disk. The original
- MBR is copied to a hidden file on the hard drive and to a
- floppy diskette for recovery purposes.
-
- The new MBR prevents access to the hard disk when the
- system is booted from a diskette, password-protects the hard
- disk on boot-up, and/or prevents booting if changes have been
- made to the CONFIG.SYS or AUTOEXEC.BAT files without supervisor
- approval -- a feature for standardizing configurations in
- corporate environments. The supervisor selects which features
- the new MBR will have.
-
- CCP Version 1.1 works on any system with 512Kb of
- memory and DOS 3.3 or greater. One floppy disk is required
- for each system CCP is installed on. CCP is not compatible
- with DOS 2.nn systems, systems partitioned with a third-party
- disk partitioning program such as SpeedStor or Disk Manager, or
- systems with a 'dual boot' partition, such as DOS-Unix or
- DOS-OS/2. It is not compatible with DR-DOS. CCP is not
- compatible with Windows 3.1 '32BitDiskAccess' (or FASTDISK)
- feature. Change your WIN.INI file to read 32BitDiskAccess=OFF
- if it does not currently read this.
-
- Version 1.0B checks for the use of disk compression
- programs to prevent disk interrupt conflicts, and performs
- integrity checking before restoring the original partition
- from the backup disk.
-
-
- CHANGES
-
- Version 1.1 contains fixes for bugs which occurred during
- attempts to update or reinstall CCP.
-
- NOTE: CCP Version 1.1 is backwards-compatible with Version 1.0.
- However, CCP Version 1.1 can not be uninstalled with CCP
- Version 1.0.
-
-
-
-
-
-
- CCP Version 1.1 Page 3
-
-
- AUTHENTICITY
-
- CCP is packaged with the VALIDATE program to ensure the
- integrity of the CCP files. The VALIDATE.DOC file tells how
- to use VALIDATE. VALIDATE can be used to check subsequent
- versions of CCP for tampering.
-
- The validation results for Version 1.1 should be:
-
- FILENAME SIZE DATE CHECK METHOD
- CCP.COM S:9,499 D:07-21-92 M1: E5E3 M2: 17FC
- CCP.MBR S:39,361 D:12-04-92 M1: E658 M2: 0BE5
-
- If your copy of CCP differs, it may have been damaged (or the
- CCP.MBR file may have been pre-configured by the system
- administrator). Always obtain CCP from a known source, such as
- McAfee Associates, its Agents, or the person responsible for
- computer security in your organization. The latest version of
- TCM and validation data for its programs can be obtained from
- McAfee Associates' bulletin board system at (408) 988-4004, from
- McAfee Virus Help Forum on CompuServe (GO MCAFEE), or by
- anonymous ftp from the mcafee.COM site on the Internet.
-
- All of McAfee Associates' programs have been archived
- with PKWare's PKZIP Authentic File Verification. If you do
- not see an "-AV" after every file is unzipped and receive
- the "Authentic Files Verified! # NWN405 Zip Source: McAFEE
- ASSOCIATES" message then do not use them.
-
- If your version of PKUNZIP does not have verification
- ability, then this message may not be displayed. Please
- contact us if you believe tampering has occurred to the .ZIP
- file.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- CCP Version 1.1 Page 4
-
-
- CCP OVERVIEW
-
- CCP installs a custom Master Boot Record (partition table)
- onto the first five sectors on the hard disk, an area of the
- disk that typically remains unused.
- The MBR installed by CCP can be configured to perform
- several functions: It can prevent access to the hard disk when
- the PC is booted from a floppy, prompt the user for a password
- when the system is booted from the hard disk, and lock the
- system when changes have been made to the CONFIG.SYS and
- AUTOEXEC.BAT files.
- The MBR will also prevent accesses to the first five (5)
- sectors of the hard disk which contain its code. Access to
- this area while CCP is active will show the original (pre-CCP
- installation) MBR. CCP will prevent any changes from being
- made to this part of the disk.
-
- NOTE: When CCP's custom MBR is installed and running, it will
- reduce the amount of total conventional memory available
- to the system by 1,024 bytes. Thus, a system with 640Kb
- of memory (655,360 bytes) will report that it has 639Kb
- of memory (654,336 bytes) available.
-
- When CCP is installed, it will save the original MBR to
- a floppy diskette as a backup. The floppy disk should be
- clearly labeled as a CCP RECOVERY DISKETTE and write protected.
- Be sure to write the user's name, department, PC serial number
- and any other important information on the label. CCP will
- also create a hidden file in the root directory of the disk
- containing the first five sectors of the hard disk. The file
- is named ▒≡DISK≡▒.IDN.
-
-
- NOTE: Do not install or run CCP while disk caching software or
- hardware is in use. CCP performs direct writes to the hard
- disk which may not be handled correctly by disk caching
- algorithms. Use of disk caches while installing CCP via
- the CCP.COM program may result in the loss of all data on
- the hard disk. Disk caches can be used AFTER CCP has
- been installed, reconfigured, or removed.
-
-
-
-
-
-
-
-
-
-
-
-
- CCP Version 1.1 Page 5
-
-
- CCP INSTALLATION and OPERATION
-
-
- NOTE: If MCONFIG and CCP are to be used together, then MCONFIG
- must be installed first. Please refer to the MCONFIG or
- TCM manual for more information.
-
- To install CCP onto your hard disk, run the CCP.COM
- program. The main menu will appear. Main menu items are:
-
- Set Access - Configure CCP's functions
- Install - Install (or reinstall) CCP
- Recover - Restore CCP after virus infection or disk crash
- Remove - Remove CCP from hard disk
- Exit - Save configuration and return to DOS
-
- SET ACCESS
- Selecting 'Set Access' brings up the 'Access Password' and
- 'Configuration' items.
- 'Access Password' selects and changes the SuperUser's
- (system administrator) password. After selecting a SuperUser
- password, be sure to write it down and store it in a safe
- location. The SuperUser password is required to reconfigure
- CCP.
- Selecting 'Configuration' brings up the Configuration
- menu. This menu allows you to select which items require
- SuperUser approval. Configuration Selection Menu items are:
-
- Recover hard disk protection
- Remove hard disk protection
- (Re)Install hard disk protection
- Set boot password
-
- Move between options with the cursor keys. Select options with
- the space bar. Options that have been selected will have a
- check-mark (ASCII 251) character in front of them. All selected
- items will be set as "unavailable" to end users. The SuperUser
- password will be required to gain access to these functions.
-
- INSTALL
- Selecting 'Install' brings up the 'Available Options' menu.
- This menu allows you to select which items the CCP MBR is
- installed with. Available Options menu items are:
-
- Require password to boot the operating system
- Check CONFIG.SYS and AUTOEXEC.BAT at system boot
- Prevent access to hard disk if system booted from floppy disk
-
- Selecting 'Require password...' allows the user to select a
- password that will be requested by CCP each time the system is
- booted from the hard disk.
-
- CCP Version 1.1 Page 6
-
-
- NOTE: The 'Require password to boot the operating system' item
- appears only if 'Set Boot Password' is not restricted by
- the Set Access menu.
-
- Selecting 'Check CONFIG.SYS and AUTOEXEC.BAT at system
- boot' enables a check of the CONFIG.SYS and AUTOEXEC.BAT files
- when the system is booted from the hard disk. Any changes made
- to these files will result in the message
-
- AUTOEXEC.BAT and/or CONFIG.SYS has been modified.
- Enter SuperUser password.
-
- being displayed when the system is booted. The hard drive will
- be locked until the SuperUser enters the password and reinstalls
- CCP or replaces the original configuration files.
-
- Selecting 'Prevent access to hard disk if system booted
- from floppy disk' disables access to the hard disk when the
- system is booted from a floppy. Attempts to access the hard
- disk will result in an "Invalid Media Specification" error
- being displayed.
-
- RECOVER
- Selecting 'Recover' allows you to restore CCP after a disk
- crash or virus infection that has corrupted the Master Boot
- Record. After selecting 'Recover' CCP will prompt the user to
- insert the CCP MBR recovery disk to reload the CCP MBR from.
- When finished, CCP will reboot the system.
-
- REMOVE
- Selecting 'Remove' allows you to unload CCP from the hard
- disk and restore the original Master Boot Record. After
- selecting 'Remove', CCP will restore the original MBR and
- reboot the system.
-
- EXIT
- Selecting 'Exit' allows you to return to DOS. If CCP has
- been reconfigured, it will prompt the user to save changes
- before exiting.
-
-
-
-
-
-
-
-
-
-
-
-
-
- CCP Version 1.1 Page 7
-
-
- CCP EXTRA PRECAUTIONS
-
- BACK UP
- Before installing CCP, it is recommended that the system be
- backed up. After installing CCP, it is recommended that one or
- more backup copies of the CCP recovery diskette be made and
- stored in a safe location. The DOS DISKCOPY command can be used
- to make copies of CCP MBR backup diskettes.
-
- NOTE: The CCP recovery diskette will appear unreadable to
- normal DOS programs, including the DIR command. Only
- CCP can access the diskette.
-
- CACHING HARD DISK CONTROLLER CARDS
- If you are installing CCP on a PC equipped with a caching
- hard disk controller card, it is recommended that you disable
- the disk cache before installing CCP. After CCP has been
- installed, the disk cache can be returned to normal operation.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-