Obtain the OPFW command tool. Run the following commands

sudo ~/Desktop/OFPW -pass "your_firmware_password"
sudo ~/Desktop/OFPW -mode 1

Users will require a password to boot form any external devices other then the HDD.