-
Notifications
You must be signed in to change notification settings - Fork 25
Description
I didn't find enableEncryption/disableEncryption command when I run sedutil-cli --help, output info listed:
sedutil-cli --help
sedutil v1.20.0 Copyright 2014-2017 Bright Plaza Inc. drivetrust@drivetrust.com
a utility to manage self encrypting drives that conform
to the Trusted Computing Group OPAL 2.0 SSC specification
General Usage: (see readme for extended commandset)
sedutil-cli <-v> <-n>
-v (optional) increase verbosity, one to five v's
-n (optional) no password hashing. Passwords will be sent in clear text!
-l (optional) log style output to stderr only
actions
--scan
Scans the devices on the system
identifying Opal compliant devices
--query
Display the Discovery 0 response of a device
--isValidSED
Verify whether the given device is SED or not
--listLockingRanges
List all Locking Ranges
--listLockingRange <0...n>
List all Locking Ranges
0 = GLobal 1..n = LRn
--rekeyLockingRange <0...n>
0 = GLobal 1..n = LRn
Rekey Locking Range
--setBandsEnabled
Set Enabled for all Locking Ranges
(passwort = "" for MSID)
--setBandEnabled <0...n>
Set Enabled for Locking Range[n]
(passwort = "" for MSID)
--eraseLockingRange <0...n>
Erase a Locking Range
0 = GLobal 1..n = LRn
--setupLockingRange <0...n>
Setup a new Locking Range
0 = GLobal 1..n = LRn
--initialSetup
Setup the device for use with sedutil
is new SID and Admin1 password
--setSIDPassword
Change the SID password
--setAdmin1Pwd
Change the Admin1 password
--setPassword <oldpassword, "" for MSID>
Change the Enterprise password for userid
"EraseMaster" or "BandMaster", 0 <= n <= 1023
--setLockingRange <0...n> <RW|RO|LK>
Set the status of a Locking Range
0 = GLobal 1..n = LRn
--enableLockingRange <0...n>
Enable a Locking Range
0 = GLobal 1..n = LRn
--disableLockingRange <0...n>
Disable a Locking Range
0 = GLobal 1..n = LRn
--setMBREnable <on|off>
Enable|Disable MBR shadowing
--setMBRDone <on|off>
set|unset MBRDone
--loadPBAimage
Write to MBR Shadow area
--revertTPer
set the device back to factory defaults
This ERASES ALL DATA
--revertNoErase
deactivate the Locking SP
without erasing the data
on GLOBAL RANGE ONLY
--yesIreallywanttoERASEALLmydatausingthePSID
revert the device using the PSID ERASING ALL the data
--printDefaultPassword
print MSID
Examples
sedutil-cli --scan
sedutil-cli --query /dev/sdc
sedutil-cli --yesIreallywanttoERASEALLmydatausingthePSID /dev/sdc
sedutil-cli --initialSetup /dev/sdc
I want to verify whether sedutil-cli has these commands, tks!