Questions tagged [opal]

Security specification for storage devices defined by TCG.

Opal is Security Subsystem Class for storage devices defined by Trusted Computing Group.

20 questions
16
votes
8 answers

How do I encrypt a Samsung Evo 840 SSD?

I've purchased a HP Envy 15-j005ea laptop which I have upgraded to Windows 8.1 Pro. I have also removed the HDD and replaced it with a 1TB Samsung Evo 840 SSD. I now wish to encrypt the drive to protect my company's source code and my personal…
11
votes
5 answers

How to enable hardware based encryption on Samsung 850 Pro

I have a new Samsung 850 pro which touts hardware-based encryption. According to that page I should just go in my bios and set a hard-drive password (no problem right). The only relevant thread I found on the issue also says something along those…
ErlVolton
  • 328
11
votes
1 answer

Samsung 960 EVO nvme encrypted so can't secure erase

I have a Samsung 960 EVO from 2016ish (I think) and a year or so ago I built a new computer. I bought a 2 TB SSD, so I wasn't too interested in my 512 GB. The drive was encrypted with BitLocker using the SSD encryption. Everything worked fine. Fast…
7
votes
2 answers

Does Linux support self-Encrypted Disk API?

In this article it is shown how easy it is to bypass BIOS ATA passphrases, and it ends with that using the disks self-Encryption Disk (SED) API from within the OS would not give a performance hit. On Windows this API is called Microsoft eDrive. See…
Sandra
  • 2,733
4
votes
1 answer

How do I tell a SED to regenerate the encryption key?

I recently purchased a Crucial MX300 to use as a boot drive, and I want to take advantage of its self encrypting functionality. I've been reading up on SEDs and I understand they use a Data Encryption Key or DEK (sometimes called a Media Encryption…
4
votes
1 answer

Self-Encrypting Drive (SED) and S3-suspend (sleep)

Since my laptop is aging, but I love its 4:3 screen, I don't like relying on external media (also no USB 3 ports), and SSDs are too small for my budget, but I want full encryption (previously truecrypt, but CPU doesn't support AES), I decided to go…
TJJ
  • 535
2
votes
1 answer

Is it possible to bypass ATA password?

I am using TrueCrypt but I want to buy SSD with SED, it's Samsung 840 Evo. After firmware upgrade it "supports advanced data security features(TCG/Opal and IEEE 1667)". If I set ATA password, would it make my SSD secure enough? I am not talking…
Quak
  • 121
2
votes
2 answers

Using software to enable SSD's self-encrypting functionality on older motherboads

I'm considering buying Crucial M500 SSD drive with SED (self-encrypting drive; ATA password, TCG Opal 2.0, eDrive compliant). I'd like to use its SED functionality, but even after reading a bunch of articles, I'm still puzzled about the exact…
2
votes
2 answers

Is it possible to check if a BIOS supports password entry for a self-encrypting SSD/harddrive?

I'm considering purchasing a SSD that has built-in hardware encryption / self-encrypting drive that provides its own full drive encryption. What can I do to check that the BIOS on my machine will support it? Background research so far Research on…
2
votes
0 answers

SED FDE Samsung 840, 850 EVO in Windows 7 Pro x64. Options to Bitlocker

The goal: In a home computer, to ensure that in the event of theft of drives with or without the computer, that the drives are unreadable. Am wanting to protect financial and personal information. Secondary goal: To have that encryption be hardware…
1
vote
1 answer

Linux dual-boot on self-encrypted drive (Dell Data Protection)

At work I have a recent Dell Latitude E6440 laptop. The IT department allowed me to install Linux on it on a dedicated partitions they created. However, they won't support me if anything gets broken because of the Linux installation. So far so good…
Huygens
  • 1,489
1
vote
2 answers

How to encrypt Samsung SSD?

I have an 860 pro SSD with windows installed on it. In the encryption section (Samsung Magician) it says ready to enable. Idk What does this mean. Is the encryption enabled now? Or there are extra steps to be done? am I supposed to erase the drive…
1
vote
2 answers

How does Windows manage authentication keys for Opal drives?

I want to use a FIPS certified Opal drive on Windows to implement a system with at least one restricted encrypted partition. I want to use the band authentication feature of Opal to restrict access to a particular partition to a single service…
hkc
  • 47
1
vote
0 answers

Computer sometimes cuts power during restart

What would you do to troubleshoot this? Booting my system requires unlocking the drive (OPAL SED w/PBA), then restarting. If the computer (more specifically the drive) loses power during the restart, the drive is locked again, meaning I have to…
thatthatisis
  • 111
  • 2
1
vote
1 answer

Do the sedutil-cli revert commands also reset the given SID?

In sedutil-cli a sedutil-cli --PSIDrevert "Reset the device to it’s factory defaults using the SID password. If the locking SP is active this command ERASES ALL DATA, requires the SID password" By which I assume it returns all…
1
2