search

Drive-Trust-Alliance / sedutil

DTA sedutil Self encrypting drive software
603 stars 232 forks source link

RevertLockingSP on TCG Enterprise doesn't work #469

Open neorob85 opened 3 months ago

neorob85 commented 3 months ago

I have a TCG Enterprise HDD (Seagate ST4000NM0043). I give the command ./sedutil-cli -v --yesIreallywanttoERASEALLmydatausingthePSID RWYFVSYK285NDN6TPL85C7WLU677FE4P /dev/sde sucessfully (revertTper completed successfully)

Then if I made a --query command I see: `sudo ./sedutil-cli --query /dev/sde

/dev/sde SAS S7CR4P0 E073 IBM-SSG TPer function (0x0001) ACKNAK = N, ASYNC = N. BufferManagement = N, comIDManagement = N, Streaming = Y, SYNC = Y Locking function (0x0002) Locked = N, LockingEnabled = Y, LockingSupported = Y, MBRDone = N, MBREnabled = N, MediaEncrypt = Y Geometry function (0x0003) Align = N, Alignment Granularity = 1 (512), Logical Block size = 512, Lowest Aligned LBA = 0 Enterprise function (0x0100) Range crossing = Y, Base comID = 0x07fe, comIDs = 2

TPer Properties: MaxMethods = 1 MaxSubpackets = 1 MaxPacketSize = 2028 MaxPackets = 1 MaxComPacketSize = 2048 MaxResponseComPacketSize = 2048 MaxSessions = 1 MaxIndTokenSize = 1992 MaxAuthentications = 20 MaxTransactionLimit = 1 DefSessionTimeout = 0 MaxSessionTimeout = 0 MinSessionTimeout = 0 DefTransTimeout = 0 MaxTransTimeout = 0 MinTransTimeout = 0 MaxComIDTime = 0 MaxComIDCMD = 0 RealTimeClock = 0 Host Properties: MaxComPacketSize = 2048 MaxPacketSize = 2028 MaxIndTokenSize = 1992 MaxPackets = 1 MaxSubpackets = 1`

As reported, LockingEnabled is active. I would like disable it. So i use the command --revertLockingSP using both MSID and PSID passwords and i get the error "method status code NOT_AUTHORIZED.

Is there a way tho disable SP Locking Authority?

neorob85 commented 3 months ago

LInes 355->368 of DtaDevEnterprise.cpp report:

OPAL_UID uid = OPAL_UID::OPAL_SID_UID; if ((lastRC = session->start(OPAL_UID::OPAL_ADMINSP_UID, password, uid)) != 0) { delete cmd; delete session; return lastRC; } cmd->reset(OPAL_UID::OPAL_THISSP_UID, OPAL_METHOD::REVERTSP); cmd->addToken(OPAL_TOKEN::STARTLIST); cmd->addToken(OPAL_TOKEN::STARTNAME); cmd->addToken("KeepGlobalRangeKey"); cmd->addToken(keep); cmd->addToken(OPAL_TOKEN::ENDNAME); cmd->addToken(OPAL_TOKEN::ENDLIST); cmd->complete();

But OPAL_UID::OPAL_ADMINSP_UID, and OPAL_METHOD::REVERTSP seem not exist in TCG Enterprise specification. Couldn't it work for this reason? or am I wrong?

youk commented 1 month ago

sedutil doesn't support TCG Enterptrise spec. Try TCGstorageAPI.