SED - Not able to defroze the Hard disk as a result cannot set password

TrueNAS General
1

Hi,

I was trying to test/implement SED( self Encrypting Drive) feature on my TrueNAs Core. But I see that the security config frozen status is “yes” due to which not able to set password.

Please let me know how to unfroze the hard disk status ( ada0) so that I can set the password and test SED feature.

I am using ASUS motherboard Intel 11th Gen processor.

I tried some methods like disable security mode in BIOS but still not able to unfreeze the hard disk.

image
image1372×622 240 KB

Thanks,
Nagesh R

2

A shown, security is not enabled.
man sedutil should give some indications.

3

Thanks for the response.

I tried man sedutil, says not found.
So tried sedutil-cli, it worked.

We observe that --scan works fine, whereas the --query is command is failing for the hard disk ada0 and other hard disks also.

image
image1333×727 81.1 KB

Also in the man sedutil-cli, page I did not find any command which enables the security.

Please let us know, how to resolve this.

Thanks,
Nagesh R

4

Continuing…

Read in man page of sedutil-cli that we need to enable tpm by editing /sys/module/libdata/parameters/allow_tpm from 0 to 1.

But I cannot find /sys folder in my True NAS Core.

Any idea about this.

image
image1209×828 70.4 KB

Also I tried updating the libata.allow_tpm=1 at the loader prompt( ok shell) but still cannot make the “sedutil-cli --query /dev/ada0” command work.

I tried the command “sedutil-cli --isValidSED /dev/ada0” - it says NO.
Any idea why? how can we know a hard disk is SED enable or not??

image
image1098×719 71.3 KB

Thanks

5

After some study and experimenting came to know, my hard disk does not support TCG Opal/Enterprise SED encryption. so sed-util tool usage is ruled out.

I should be working only with camcontrol command only. but even there, I am not able to set the password.

6

man sedutil-cli giving examples with /dev/sdc, which is Linux wording, rather than /dev/da2 or /dev/ada2 suggest that minimal efforts went into porting this utility to FreeBSD.

7

As mentioned earlier sedutil is ruled out for my disks.

Please help me how to unfreeze the hard disks so that I can enable security and set the password for locking and unlocking using Camcontrol command.

8

Some one please guide me here.

a6cf823402711305d13cdc0a5fd725ea7212a189_2_690x312
a6cf823402711305d13cdc0a5fd725ea7212a189_2_690x312690×312 82.2 KB

how to unfroze the hard disks so that I can enable security