gasrasolar.blogg.se - Best encryption software to use with tcg opal

BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL HOW TO
BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL INSTALL
BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL MANUAL
BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL FULL

Crucial MX100/MX200/MX300, Samsung EVO 840/850, Samsung T3/T5), so these models should not be used with Opal 2 hardware encryption.

Vulnerabilities were found in some early SSD models (e.g.

They use their own pre-boot system (PBA) for unlocking (see below).

Opal 2 drives do not work with ATA passwords.

There is no protection at all until an Opal 2 drive has been set up and a password has been set.

To correct and/or amend other postings on this topic: (The password actually encrypts the MEK.)

A password must be set to protect the drive.

Initially, the media encryption key is unprotected (otherwise you could not access the drive).

An Opal 2 drive's contents are always encrypted via a factory-set media encryption key (MEK, also known as DEK).

The OP's initial understanding is correct: Opal 2-compliant Self-Encrypting Disk Drives (SED)

BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL HOW TO

See also the Stack Overflow Q&A: " ATA Trusted commands - How to set libata allow_tpm" and especially Dell's article: " Encrypting Your Ubuntu Operating System Using a SED Hard Drive" where they explain a lengthy procedure (last modified: 01:05 PM). In your circumstances you are probably best off using hdparm or getting sedutil setup.ĭon't forget to set your screensaver to a short time and hibernation should also be brief if you want the encrypted drive to remain secure, see my other answer linked to above, a powered on encrypted drive is unlocked once it's successfully bootedĪ helpful article for Arch Linux explains ATA BIOS Passwords and sedutil with drives supporting Opal under Linux, it explains the need to set libata.allow_tpm. The consumer version claims the Magician SSD management utility is designed to work with all Samsung SSD products including 470 Series, 750 Series, 830 Series, 840 Series, 850 Series, 860 Series, 950 Series, 960 Series and 970 Series.

BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL MANUAL

The user manual for the Enterprise edition of the Magician software claims to only support Samsung SSD SM863 and PM863. Using a bootable USB drive with Windows and Samsung's Windows software is another, albeit inconvenient, option for setting up your SSD for use with another operating system.

BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL FULL

(Version 3), RHEL 5.7 up to 6.4 (6.4 and later has full support), and CentOS.įor Windows and Samsung SSDs the software used is called: " Samsung SSD Magician DC 2.0". It also has limited support for Windows Server 2012 R2, Widows Server 2016 RS1 This software is not compatible with other manufacturers' SSDs, nor is it certain to work with other Samsung SSDs. PDF, page 10) the Samsung SSD DC Toolkit is designed to work with Samsung SSD products including PM863, PM863a, SM863, SM863a, PM963 non-customized, 860 DCT, 883 DCT, 983 DCT, 983 DCT M.2, and 983 ZET. Samsung SSDs have software available to setup their operation, this only works for certain SSDs and operating systems, otherwise the default is no password and encryption is enabled.įor "Ubuntu 12.04 LTS and later" (source: user manual, DC Toolkit.

The two main ones for Linux are hdparm and sedutil, see my answer on UNIX and Linux Stack Exchange.

BEST ENCRYPTION SOFTWARE TO USE WITH TCG OPAL INSTALL

Once you install a custom operating system you need to use the tools available for that OS. It also seems that sometimes other drives, such as the Seagate 1200 Pro SSD, are used so it's important when using Windows to know which drive is being used so you can visit the manufacturer's website. Apparently the Intel SSDs have some management capabilities related to vPro that the non-Intel drives don't, such as remote wiping and the ability to enable/disable certain encryption modes. The Lenovo ThinkPad L480 with an Opal supported SSD uses a Samsung "MZ-V6E500BW SSD 960 EVO NVMe M.2 500GB", 256GB, or an Intel "180GB Solid State Drive SATA3.2" OPAL2.0 M.2 drive depending on chosen options.