search

Drive-Trust-Alliance / sedutil

DTA sedutil Self encrypting drive software
610 stars 236 forks source link

what is USER ID ? #135

Closed jackiea5106 closed 7 years ago

jackiea5106 commented 7 years ago

Dear Sirs: When I try the function "Enableuser" with "Sedutil-cli" , there always show the error message==>" incorrect number of parameters. " I know may be I input the error user id. But i do not what is USER ID ?

r0m30 commented 7 years ago

What is the exact command you are entering? OPAL has multiuser support but that is not currently implemented.

jackiea5106 commented 7 years ago

Dear r0m30: I enter the exact command==>”enableuser” but always get the error response.

From: r0m30 [mailto:notifications@github.com] Sent: Wednesday, July 19, 2017 9:49 AM To: Drive-Trust-Alliance/sedutil Cc: Jackie Chiang (江啟宏); Author Subject: Re: [Drive-Trust-Alliance/sedutil] what is USER ID ? (#135)

What is the exact command you are entering? OPAL has multiuser support but that is not currently implemented.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/Drive-Trust-Alliance/sedutil/issues/135#issuecomment-316248428, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AZeB94VaK9Na1o8LzzuIE2CMKQQLkC2xks5sPWB0gaJpZM4Mp6BR.

r0m30 commented 7 years ago

I think I understand now.... A userid is one of the defined users in the TCG spec. They are Admin1-n and User1-n, the query tells you how many of each you have OPAL 2.0 function (0x0203) Base comID = 0x1000, Initial PIN = 0x0 , Reverted PIN = 0x0 , comIDs = 1 Locking Admins = 4, Locking Users = 16, Range Crossing = N

So the command would be sedutil-cli --enableuser User1 {password} {drive}

You can enable any Admin or User up to the numbers shown in the query. There is nothing else you can do with them after that until sedutil is updated with multiuser support.

jackiea5106 commented 6 years ago

Dear Sir: Thank you for your answer. I have another question about TCG Opal password type. As I know the password have 4 Type==> MSID ,PSID ,Admin ,User password. Do you know the other type “SID” Password for TCG Opal ? Does the “Sedutil Tool” can support test SID Password ?

From: r0m30 [mailto:notifications@github.com] Sent: Wednesday, July 19, 2017 11:49 AM To: Drive-Trust-Alliance/sedutil Cc: Jackie Chiang (江啟宏); Author Subject: Re: [Drive-Trust-Alliance/sedutil] what is USER ID ? (#135)

I think I understand now.... A userid is one of the defined users in the TCG spec. They are Admin1-n and User1-n, the query tells you how many of each you have OPAL 2.0 function (0x0203) Base comID = 0x1000, Initial PIN = 0x0 , Reverted PIN = 0x0 , comIDs = 1 Locking Admins = 4, Locking Users = 16, Range Crossing = N

So the command would be sedutil-cli --enableuser User1 {password} {drive}

You can enable any Admin or User up to the numbers shown in the query. There is nothing else you can do with them after that until sedutil is updated with multiuser support.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHubhttps://github.com/Drive-Trust-Alliance/sedutil/issues/135#issuecomment-316264817, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AZeB93dYzewnG8TQr66ofT-g_9JDMpvoks5sPXywgaJpZM4Mp6BR.

r0m30 commented 6 years ago

The SID is the master authority for the admin domain, it is used primarily to activate the locking domain. Sedutil does use the SID and allows you to change it's password.