[Wolves] Fwd: Wave security on mstata drive

[Mark Croft Redditch Linux Mint]

Thx I will check it out.. had loads of advice from Facebook group.. lots of
duff stuff as well.

https://m.facebook.com/groups/linux.fans.group/permalink/8110202512354793/


This was one I am was trying today

"https://www.kali.org/tools/dislocker/ this is a tool in kali id boot up
kali and see whats available in their repos if you can decrypt the drive
with your credentials and format it.
https://www.shadowinfosec.io/2017/07/mounting-encrypted-hard-disk-luks-using.html?m=1
this is a tut regarding LUKS systems. And this is a talk given at black hat
about bypassing SED drives: https://youtu.be/beMtNM7nwfQ there was also one
given at BSides."



On Wed, 21 Sept 2022, 14:09 Chris Ellis via Wolves, <
wolves at mailman.lug.org.uk> wrote:

> Hi
>
> On Mon, Sep 19, 2022 at 10:51 PM Mark Croft Redditch Linux Mint via
> Wolves <wolves at mailman.lug.org.uk> wrote:
> >
> >
> >
> >
> > I have been tasked with fixing
> > Dell LATITUDE E7240
> >
> > SAMSUNG SSD SM841 SED mSATA 256GB
> >
> > S184NYAF203910
> >
> > Check pics
> >
> > I have the password but can not get into windows repair menu f8..
> >
> > I am guessing new msata card ?
> >
> > I have booted in ubuntu . It sees it but can delete the wave partition
> >
> > I have searched for wave software thinking maybe there a utility too
> switch off the write protection but no luck
> >
> > Any ideas..
>
> It looks like Wave uses the Self-Encrypting Drive functionality, part
> of the OPAL 2.0 spec to secure the drive.
>
> It looks like the only option is to do a PSID revert, this may not be
> possible on an OEM drive.  This might be possible with sedutil, or
> Samsung Magician.
>
> You may need to read the PSID from the drive sticker.  If your lucky
> there might be a UEFI option to erase and reset the drive.
>
> This seems to be the best guide I can find:
>
> https://dellwindowsreinstallationguide.com/using-sedutil-to-psid-revert-a-samsung-or-crucial-ssd/
>
> https://github.com/Drive-Trust-Alliance/sedutil/blob/master/linux/PSIDRevert_LINUX.txt
>
> >
> >
> > --
>
> Chris
>
> --
> Wolves LUG mailing list
> Homepage: http://www.wolveslug.org.uk/
> Mailing list: Wolves at mailman.lug.org.uk
> Mailing list home: https://mailman.lug.org.uk/mailman/listinfo/wolves
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.lug.org.uk/pipermail/wolves/attachments/20220921/df3fb504/attachment.htm>