Ask Your Question

NVMeistheanswer's profile - activity

2017-10-19 21:22:55 -0500 received badge  Notable Question (source)
2017-10-19 21:22:55 -0500 received badge  Popular Question (source)
2017-04-19 09:09:16 -0500 answered a question how do enable encryption I have M.2 Sumsung 960 Pro

I figured out the issue and i have it working via sedutil-cli command.

2017-04-18 23:42:54 -0500 received badge  Nice Question (source)
2017-04-18 11:53:55 -0500 commented answer how do enable encryption I have M.2 Sumsung 960 Pro

Thanks for the help anyway! Maybe there is somebody else with experience using SED drives.

2017-04-18 10:58:23 -0500 commented answer how do enable encryption I have M.2 Sumsung 960 Pro

thank you for the reply. In our case, we’d rather unlock the drives from the command line using the sedutil-cli command.

2017-04-18 09:28:20 -0500 received badge  Student (source)
2017-04-17 20:35:49 -0500 asked a question how do enable encryption I have M.2 Sumsung 960 Pro

I have a M.2 Samsung 960 Pro that is TCG and Opal compliant. The question is how do i encript this drive? I'm almost have it?

These are the commands on how to encrypt a drive. It somewhat gets it working. Let me say that I don’t think steps 1, 2, 3, and 8 are really needed for data drives, but I will go ahead and include them since I did execute them.

  1. yum install ncurses-devel
  2. cd <dist>/LinuxPBA
  3. make CONF=ReleaseX8664
  4. cd <dist>/linux/CLI
  5. make CONF=ReleaseX8664
  6. No libata kernel flag is required for NVMe drives
  7. sedutil-cli –initialSetup <password> /dev/nvme0
  8. sedutil-cli --loadPBAimage <password> <file created="" in="" step="" 3=""> /dev/nvme0
  9. sedutil-cli --setMBREnable on <password> /dev/nvme0
  10. sedutil-cli --enableLockingRange 0 <password> /dev/nvme0
  11. Power off the server and remove power, don’t just reboot
  12. Drive should now be locked a. Verify with: sedutil-cli --listlockingranges <password> /dev/nvme0 b. Look at range 0 and verify read and write are enabled and locked
  13. To unlock: a. sedutil-cli –setMBRdone on <password> /dev/nvme0 b. sedutil-cli --setlockingrange 0 RW <password> /dev/nvme0
  14. Now you can mount the partition on the drive a. I have only tried this once, and it couldn’t read the super blocks, so this is where I am in the investigation