Rationale
Leaving a screen unlocked enables attackers to access the system with the logged-in user's privileges. Manual or automatic locking the screen with a password prevents such access.
Instructions for Enabling Manual Locking
By default, there is no way for the user to manually lock the screen. To enable manual locking, follow these steps:
-
In the Setup, go to User Interface > Screenlock / Screensaver.
-
Do one or both of the following:Activate the Quick start panel starting method to give the user a button for locking the screen manually.Activate Use hotkey and set a combination of keys that lets the user lock the screen manually, e.g. [Ctrl+Shift+L].
-
Click Apply.
Instructions for Automatic Locking
By default, the screensaver is started automatically after 5 minutes, but the screen is not locked with a password. To enable locking, follow these instructions:
-
Go to User Interface > User Interface > Screenlock / Screensaver > Options.
-
Activate Start automatically.
-
Set the Timeout, i.e. the number of minutes of user inactivity before the screensaver starts automatically.
-
As a password, select User password (see Setting Local Passwords) or a separate Screenlock password (and set one).
-
If applicable, activate Allow administrator password to allow the administrator to unlock the screen.
-
Click Apply.