Booting & unlocking USB attached SSD

Drive-Trust-Alliance / sedutil

DTA sedutil Self encrypting drive software

610 stars 236 forks source link

Booting & unlocking USB attached SSD #183

Closed eleksis closed 3 years ago

eleksis commented 6 years ago

Hi, was struggling to get sedutil working on my external bootable ssd. HW: Samsung evo 850, Startech with ASM1051E chip, Lenovo T460.

I followed commands on wiki. (disk detected, locking enabled, mbr loaded, etc) The problem was, when i entered password at PBA, it kept re-loading shadow mbr and asking me for pwd again and again.

After setting setMBRDone to off, problem seems to be gone. What exactly does this do? Documentation is really poor.

fgimenezm commented 6 years ago

I'm just guessing but I think USB is probably losing power on reboot and that re-locks the drive. Maybe you need external power for the USB drive.

r0m30 commented 6 years ago

Setting mbrdone off???????? maybe you mean on? It is probably a power cycle issue as @elpetak indicated above but if toggling the mbrdone flag fixed it then that is strange because the drive should be locked/encrypted if there was a power cycle.

I don't and won't document the OPAL spec, only sedutil. IF you want to know what mbrdone or any other OPAL flag or feature is/does there are hundreds of pages on the TCG website that go into great detail about those.