A computer system security apparatus and a security method thereof, the apparatus including a recognition unit to recognize identification information of a user; an operation unit to produce a result value by executing a predetermined operation on the identification information of the user and unique identification information of the computer system; and a main control unit to execute a booting of the computer system according to whether a preset password of the computer system and the result value are the same.