解锁并重新使用硬件 FDE Seagate Momentus FDE2 硬盘来运行 Linux

解锁并重新使用硬件 FDE Seagate Momentus FDE2 硬盘来运行 Linux

我拿到了一台旧的戴尔 E6410 笔记本电脑,里面有一个硬件 FDE Seagate Momentus 7200 FDE2 硬盘,我想在这台机器上安装 Linux。

当我从运行 Linux live 的 USB 驱动器启动时,所连接的磁盘仅显示一个分区 - MBR,大小为 128 MB。笔记本电脑启动后,硬盘没有设置 BIOS 级密码。POST 后,出现指向“wave.com”(用于 Wave Systems 磁盘加密)的磁盘加密提示,输入正确的用户名和密码后,磁盘解锁并启动到已安装的 Win 7。现在我打算关闭 Windows 并运行 Linux。但是一旦 Linux 启动,根本没有磁盘可以清理/解锁。hdparm似乎无法解锁驱动器,因为它报告它已经解锁。我在 hddgurus、Dell & Seagate 和其他各种论坛上搜索都无济于事,wave 显然已关闭,他们不再提供任何支持。

fdisk节目

Disk /dev/sdb: 134 MB, 134217216 bytes
5 heads, 52 sectors/track, 1008 cylinders, total 262143 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x01e85800

   Device Boot      Start         End      Blocks   Id  System
/dev/sdb1   *           1    16450550     8225275    0  Empty

我从中hdparm -I <device>获得有关磁盘安全的以下信息。

Security: 
        Master password revision code = 65534
            supported
        not enabled
        not locked
        not frozen
        not expired: security count
            supported: enhanced erase

完整的 hdparm 结果如下。

ATA device, with non-removable media
    Model Number:       ST9250414ASG                            
    Serial Number:      5VG6TSWD
    Firmware Revision:  DED1    
    Transport:          Serial
Standards:
    Used: unknown (minor revision code 0x0029) 
    Supported: 8 7 6 5 
    Likely used: 8
Configuration:
    Logical     max current
    cylinders   16383   16383
    heads       16  16
    sectors/track   63  63
    --
    CHS current addressable sectors:   16514064
    LBA    user addressable sectors:     262144
    LBA48  user addressable sectors:     262144
    Logical/Physical Sector size:           512 bytes
    device size with M = 1024*1024:         128 MBytes
    device size with M = 1000*1000:         134 MBytes 
    cache/buffer size  = 16384 KBytes
    Nominal Media Rotation Rate: 7200
Capabilities:
    LBA, IORDY(can be disabled)
    Queue depth: 32
    Standby timer values: spec'd by Standard, no device specific minimum
    R/W multiple sector transfer: Max = 1   Current = ?
    Advanced power management level: 128
    Recommended acoustic management value: 208, current value: 208
    DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6 
         Cycle time: min=120ns recommended=120ns
    PIO: pio0 pio1 pio2 pio3 pio4 
         Cycle time: no flow control=120ns  IORDY flow control=120ns
Commands/features:
    Enabled Supported:
       *    SMART feature set
            Security Mode feature set
       *    Power Management feature set
       *    Write cache
       *    Look-ahead
       *    WRITE_BUFFER command
       *    READ_BUFFER command
       *    NOP cmd
            DOWNLOAD_MICROCODE
       *    Advanced Power Management feature set
       *    Automatic Acoustic Management feature set
       *    48-bit Address feature set
       *    Mandatory FLUSH_CACHE
       *    FLUSH_CACHE_EXT
       *    SMART error logging
       *    SMART self-test
       *    General Purpose Logging feature set
       *    WRITE_{DMA|MULTIPLE}_FUA_EXT
       *    WRITE_DMA_QUEUED_FUA_EXT
       *    64-bit World wide name
       *    IDLE_IMMEDIATE with UNLOAD
            Write-Read-Verify feature set
       *    WRITE_UNCORRECTABLE_EXT command
       *    {READ,WRITE}_DMA_EXT_GPL commands
       *    Segmented DOWNLOAD_MICROCODE
       *    Free-fall Control feature set
       *    Gen1 signaling speed (1.5Gb/s)
       *    Gen2 signaling speed (3.0Gb/s)
       *    Native Command Queueing (NCQ)
       *    Host-initiated interface power management
       *    Phy event counters
            Device-initiated interface power management
       *    Software settings preservation
       *    SMART Command Transport (SCT) feature set
       *    SCT Error Recovery Control (AC3)
       *    SCT Features Control (AC4)
       *    SCT Data Tables (AC5)
            unknown 206[12] (vendor specific)
**Security: 
    Master password revision code = 65534
        supported
    not enabled
    not locked
    not frozen
    not expired: security count
        supported: enhanced erase**
    52min for SECURITY ERASE UNIT. 2min for ENHANCED SECURITY ERASE UNIT. 
Logical Unit WWN Device Identifier: 5000c50029b97722
    NAA     : 5
    IEEE OUI    : 000c50
    Unique ID   : 029b97722
Checksum: correct

特别是

  Security:
    Master password revision code = 65534
        supported
    not enabled
    not locked
    not frozen
    not expired: security count
        supported: enhanced erase

hdparm --security-unlock或者--security-disable似乎不起作用,因为磁盘只显示一个分区并且没有设置任何内容。

hdparm 论坛提到,这Master password revision code = 65534意味着主密码(如在https://www.seagate.com/staticfiles/support/disc/manuals/notebook/momentus/FDE.2ProdManual.pdf, “ATA 主密码设置为安全 ID (SID)。” ) 可用。但由于没有任何工具(hdparm,甚至大使馆安全中心 TDM)可用于让驱动器禁用基于硬件的 FDE。

关于如何最好地进行的任何提示?我是否最好将磁盘扔掉并使用新磁盘?

这是一个完全未使用的 250 GB 7.2K rpm 驱动器,将其扔掉似乎非常浪费。

相关内容