We have recently had a couple of boards at one of our locations mysteriously get down clocked from their factory defaults to 100MHz. One was a standard 450 board and the other a 450G. Both of these either happened the same day within hours of the install, or a day or two after the install. At first we thought it was heat or the power supply making the board do this, but according to MikroTik the only way for this to happen is for someone to log into the BIOS and set the CPU clock speeds down.
I have looked and there does not appear to be a way to password protect the BIOS, so I am wondering, is there a way to log actions taken in the BIOS to the flash disk, or start up messages? Or better yet is there a way we can disable the ability to log into the BIOS and turn it back on at a later date if it is ever needed?
With logging the bootup messages, we would at least be able to see when a board was rebooted and if the CPU changed, not an ideal solution but we would at least be able to narrow down a time frame and investigate further. With locking down the BIOS we at least prevent things like this happening by someone logging into the BIOS and making these changes.