Comments (2)
Hi,
It looks like you are having an Alignment Granularity issue. If you look at the output of a query command you will see the locking range alignment requirements. The Crucial drives I have tested are usually Alignment granularity 8, so you need to define your locking ranges on 8 block boundaries (start AND end).
The setuplockingrange command is startblock, number of blocks. This means that to protect blocks 0-2047 you would need to use startblock 0 and number of blocks 2048, this would also probably fix your alignment issue.
The PBA only unlocks the global range (0), if you want to protect the mbr and partition table, I would recommend that you use the readonlyLockingRange command it has the same syntax as the setupLockingRange but only activates write locking. Then the mbr and partition table will be readable but not writable until you manually unlock the range. If you do use this method then you want to make sure you unlock the range before you proceed with an OS install and do not power cycle the drive until you have finished the disk configuration.
from sedutil.
Thank you so much. It's working now!
I had simply misunderstood the setuplockingrange command. It is indeed startblock, number of blocks and NOT startblock, endblock (like in most apps out there).
So, startblock 0 and number of blocks 2048 works with my Crucial boot drive (Alignment granularity 8).
An enhanced Wiki section about locking ranges and user management would be much appreciated.
For the record, booting Rescue.img:
sedutil-cli --reverttper password /dev/sda
sedutil-cli --initialsetup password /dev/sda
sedutil-cli --setupLockingRange 1 0 2048 password /dev/sda
sedutil-cli --loadPBAimage password pbafilename /dev/sda
sedutil-cli --setMBREnable on password /dev/sda
sedutil-cli --enableLockingRange 0 password /dev/sda
sedutil-cli --readonlyLockingRange 1 password /dev/sda
Power off the computer to lock the drive.
Power the computer on. The PBA ask for the password and unlocks the global range (LR0) if password is right.
LR1 (blocks 0-2047) is still write protected (read only), booting Rescue.img:
sedutil-cli --setLockingRange 1 rw password /dev/sda
Proceed with all OS installs.
Power off the computer to lock the drive OR booting Rescue.img:
sedutil-cli --setLockingRange 1 ro password /dev/sda
Great stuff. :-)
from sedutil.
Related Issues (20)
- Thinkpad T14 gen2 intel with nvme opal drive hangs booting rescue.img HOT 3
- PSID revert for Intel SSD Pro 1500? (TCG Opal SSC Specification Version 1.0 Rev 3.0 compliant) HOT 1
- removed HOT 4
- OS not booting after unlocking disk HOT 3
- Data vanished after poweroff/poweron HOT 6
- USB keyboard required for entering passphrase HOT 4
- Disk no more recognized as opal compliant under Windows
- Boot loader disapears after locking and unlocking the drive. HOT 2
- Samsung ssd question ? HOT 4
- Different incompatible(?) versions of MSED on different drives HOT 1
- Which version to use? Why are there so many forks?
- Solution for Acer and ASUS... boot disappeared... Dual boot problem
- [Enterprise] Toshiba MG08SCP16TE SAS - No setup possible
- Unable to unlock drive in Windows 11 - NOT_AUTHORIZED HOT 2
- Question about setting locking ranges HOT 2
- Dell Security Manager requires password HOT 1
- bootparam "reboot=warm" needed on my UEFI system HOT 3
- Touch and/or Bluetooth Support for the PBA
- Using the Drive-Trust-Alliance sedutil on a Dell Precision T1700 Small Form Factor, circa 2015
- Seagate ST4000NM0053 HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sedutil.