sedutil icon indicating copy to clipboard operation
sedutil copied to clipboard

Failed to enable sedutil on INTEL SSDPEKKF256G8L (Lenovo Thinkpad X1 Yoga Gen4)

Open shaked8634 opened this issue 2 years ago • 5 comments

Very like this issue, I'm getting:

Session start failed rc = 136 Unable to start Unauthenticated session EndSession Failed Unable to read MSID password Initial setup failed - unable to take ownership

After running: sedutil --initialsetup /dev/nvme0

I get the same when running from the the 64bit rescue image and from the OS (Arch Linux). Sedutil version 1.20

  • Has anyone manage to enable OPAL on these Intel NVMEs?

Attaching full output of initialsetup, scan and query: sedutil_scan_vvvvv.txt sedutil_query_vvvvv.txt sedutil_initialsetup.txt

shaked8634 avatar Mar 03 '22 10:03 shaked8634

On the disk should be label PSID with a long number.

./sedutil-cli --PSIDrevert "ThePSIDPrintedOnTheLabel" /dev/nvm0

ChriMarMe avatar Apr 12 '22 08:04 ChriMarMe

To elaborate further:

ODM/OEMs may activate OPAL in manufacturing. This prevents anyone without physical possesion of the device to claim the disk under their management. First thing to gain control of the disk is --PSIDrevert to reset the disk to something like "unmanaged".

Note: --PSIDrevert MAY delete the content of the disk or render it unreadable so ALL DATA MAY BE LOST.

ChriMarMe avatar Apr 12 '22 08:04 ChriMarMe

./sedutil-cli --PSIDrevert "ThePSIDPrintedOnTheLabel" /dev/nvm0

worked without even nuking my data. Previously I had all sorts of issues being unable to run any sedutil commands

Demetrio92 avatar Jan 20 '23 23:01 Demetrio92

@ChriMarMe hello, any way to get the status before psid revert?

we have tried the query between normal pc and not authorized pc, but there's no difference of the output.

neo125874 avatar Dec 14 '23 09:12 neo125874

Hi @neo125874 unfortunatly I'm unable to help here.

ChriMarMe avatar Dec 14 '23 12:12 ChriMarMe