You have to boot into your recovery partition (Cmd+R on boot), then there's a menu option to set the firmware password, which will be active on the next reboot.