Drive-Trust-Alliance / sedutil

DTA sedutil Self encrypting drive software
603 stars 233 forks source link

Attempting to unlock NVMe drive results in NVME Security Command Error: 16396 #406

Open MehGyver opened 1 year ago

MehGyver commented 1 year ago

I'm having a significant issue with getting sedutil-cli --setlockingrange 0 RW to consistently unlock some of my drives. I have a setup where drives travel between multiple machines, the primary machine for the drives in question is a custom server using a supermicro motherboard and a AOC-SLG3-4E4T oculink retimer card to talk to the NVMe drives. This machine works fine we never have any issue locking or unlocking. The problem comes when we connect the drives to our Oracle X8-2L server. The server talks to the NVMe drive through a Highpoint SSD7120 RAID HBA. Sorry for the info dump but I figure more info is better than not enough. The type of drive in question is a Intel dc p4510 2TB (PN SSDPE2KX020T80)

Both systems are running the same version of Linux (7.9), both systems are running the same versions of nvme-cli and sedutil-cli. However in the Oracle server when I attempt to unlock this drive I get the following error:

I run the command: sedutil-cli --setlockingrange 0 rw , in return I see

NVMe Security Command Error: 16396 Command Failed on Send 12 Command Failed on Send 12 Properties exchange failed NVMe Security Command Error: 16396 Command Failed on Send 12 Command Failed on Send 12 Session start failed rc=12 NVMe Security Command Error: 16396 Command Failed on Send 12 Command Failed on Send 12 End Session Failed

I've successfully unlocked drives on my Oracle machine before connected through the same Highpoint SSD7120 RAID HBAs just not these drives. Any help would be greatly appreciated.