Silicon Power TCG OPAL SSC-Based SED Software Instructions
- June 6, 2024
- Silicon Power
Table of Contents
Silicon Power TCG OPAL SSC-Based SED Software
Step-by-Step instructions to implement TCG OPAL SSC-based SED
This application note shows the step-by-step instructions to implement TCG OPAL SSC-based SED. Before implementation it is necessary to prepare Windows 10 Preboot Authentication (PBA). There are many alternative tools to create Windows 10 PBA such as key management software vendor WinMagic and McAfee. You also get the open source tool SEDutil and follow the procedure “ How to use SEDutil for Windows 10 Preboot Authentication” to prepare boot settings in advance.
PBA boot
- When PBA boot setting is ready, reboot system and show the following prompt:
- Input “password’” , then login into console
- Input ID name “root” to login then input command “reboot” for warm reboot to pass Boot Authorization
- After finish warm boot-up and prompt password input, just press ENTER key to enter Windows 10 OS
- If SED is set up as Data Drive, then Windows system will show this SED drive as Non-partition drive as following.
- If SED is set up Boot Drive, system can show the normal partition via PBA boot.
Used case
- Scan drive
- \\.\PhysicalDrive0” is not OPAL 2.0 supported
- “\\.\PhysicalDrive1” & “\\.\PhysicalDrive3” is OPAL 2.0 supported
- Initialize “\\.\PhysicalDrive3”
- Get information of “\\.\PhysicalDrive3”
- Attached SED to Windows 10 and checked via disk management , the show “unknown partition” as follows.
- When LockingEnable=Y, all of data of SED will be erased if execute command “revertTPer”
PSID Revert
The PSID is a 32 character password that can be used to prove you have physical access to the drive. It is printed on the drive label per request. The PSID revert function is useful if a third-party application or your OS has locked your drive and you are no longer able to access it because of some failure. It allows you to regain the use of the drive but all of the data on the drive will be erased.
Remove OPAL function
- If you want to keep the data protected by the global locking range then you should perform a the Remove OPAL procedure if you have the Admin1 password
- Change LockingEnable=N
- Information might be changed or updated without notice.