Abstract: A system and method for disabling add-in card slots (e.g. PCI or ISA) in a computer system. The slots may be enabled or disabled, according to the preferred embodiment, only after the user has entered a System Administrator password. This password is stored in a non-volatile memory within the computer system, so it is less vulnerable to attack through removal of the power line or battery from the system. The preferred system provides that devices attached to disabled slots are invisible to the operating system.

Abstract: An improved system and method for FLASH BIOS upgrades which is particularly useful in network hubs. Each hub or node which is equipped with a FLASH memory is also equipped with a validation system, which ensures that a received FLASH upgrade is authorized and uncorrupted. Each set of instructions to be flashed is marked both with a vendor authorization digital signature and also a system administrator authorization digital signature, and BOTH digital signatures must be recognized by the validation system before the FLASH memory will be upgraded. Because digital signatures are used for security purposes, flash upgrades can be performed from any location on the network, and are not limited to an administrative node.