Rationale

Leaving a screen unlocked enables attackers to access the system with the logged-in user's privileges. Manual or automatic locking the screen with a password prevents such access.

Instructions for Enabling Manual Locking

By default, there is no way for the user to manually lock the screen. To enable manual locking, follow these steps:

  1. In the Setup, go to User Interface > Screenlock / Screensaver.
  2. Do one or both of the following:
    • Activate the Quick start panel starting method to give the user a button for locking the screen manually.
    • Activate Use hotkey and set a combination of keys that lets the user lock the screen manually, e.g. [Ctrl+Shift+L].
  3. Click Apply.

Instructions for Automatic Locking

By default, the screensaver is started automatically after 5 minutes, but the screen is not locked with a password. To enable locking, follow these instructions:

  1. Go to User Interface > User Interface > Screenlock / Screensaver > Options.
  2. Activate Start automatically.
  3. Set the Timeout, i.e. the number of minutes of user inactivity before the screensaver starts automatically.
  4. As a password, select User password (see Setting Local Passwords) or a separate Screenlock password (and set one).
  5. If applicable, activate Allow administrator password to allow the administrator to unlock the screen.
  6. Click Apply.