Method and system for secure, one-time password override during password-protected system boot

A computer program product comprising:

• a computer readable medium;
• and
• program code on said computer readable medium for:
• dynamically generating a one-time use password from a first hash of a random number generated on a client system and a secret retrieved from a secure device associated with the client system, wherein said single-use password operates as a master password but is not the administrative password of the client system and wherein said single-use password is no longer valid for accessing said client system after an initial use, wherein further said secure device if from among a trusted platform module (TPM) and a secure non-volatile random access memory (NVRAM);
• and
• enabling access to said client system and hardfile and reset of user passwords via said one-time use password.

The computer program product of claim 22, further comprising program code for:

• displaying a graphical user interface with prompts for the user to enter a series of authorization credentials and said random number and first hash;
• establishing a secure communication path via an Internet accessible path to the server, wherein said user enters required credential information within a browser on the client system to gain access to a restrictive-use password generation utility on said server;
• and
• responsive to a verification of the authorization credentials entered by the user, providing the user with said one-time use password.