Seagate® Momentus® FDE Self-Encrypting Drive Self-Qualification Kit
Total Page:16
File Type:pdf, Size:1020Kb
Marketing Bulletin Seagate® Momentus® FDE Self-Encrypting Drive Self-Qualification Kit Self-Qualification Kit for System Integrators This kit provides information necessary to test the functionality of your system to assure it can support Momentus FDE Self-Encrypting Drives (SED). While most systems have the needed functionality, certain chipset/BIOS combinations may block certain commands that are needed to control the encrypting drives. The first step is to ensure that you have a Seagate Momentus FDE Self- Encrypting Drive (SED), as identified in Table 1. It is important that the part number on the drive label (PN: XXXXXX-XXX) matches one of the part numbers listed. This self-qualification kit is provided for informational purposes only. Seagate provides no warranty either expressed or implied regarding the accuracy or validity of this document and associated information. Seagate® Momentus® FDE Self-Encrypting Drive Self-Qualification Kit Table 1. Momentus FDE Self-Encrypting Drive Models Description Model Number Part Number Capacity ST940816AS 9CU131 40 GB ST980816AS 9CU132 80 GB Momentus® 5400 FDE.2 ST9120829AS 9CU133 120 GB ST9160824AS 9CU134 160 GB ST9160312AS 9GG132 160 GB ST9200322AS 9GG13E 200 GB Momentus 5400 FDE.3 ST9250322AS 9GG133 250 GB ST9320322AS 9GG134 320 GB ST980312AS 9GG131 80 GB ST9120414AS 9GU14C 120 GB ST9120414AS 9GU14C 120 GB Momentus 7200 FDE ST9160414AS 9GU142 160 GB ST9250424AS 9GU143 250 GB ST9320424AS 9GU144 320 GB ST9120414ASG 9GUG4C 120 GB ST9160414ASG 9GUG42 160 GB Momentus 7200 FDE + ZGS* ST9250424ASG 9GUG43 250 GB ST9320424ASG 9GUG44 320 GB ST9120317AS 9PR131 120 GB ST9160317AS 9PR13C 160 GB Momentus 5400 FDE.4 ST9250317AS 9PR132 250 GB ST9320327AS 9PR133 320 GB ST9500327AS 9PR134 500 GB ST9160413AS 9PT14C 160 GB ST9250411AS 9PT142 250 GB Momentus 7200 FDE.2 ST9320426AS 9PT14E 320 GB ST9500421AS 9PT144 500 GB ST9120412ASG 9RXG41 120 GB ST9160418ASG 9RXG4C 160 GB Momentus 7200 FDE.2 + ZGS* ST9250464ASG 9RXG42 250 GB ST9320426ASG 9RXG4E 320 GB ST9500426ASG 9RXG44 500 GB *Zero G Sensor Seagate continues to expand the Momentus FDE • DriveTrust™ Security API—Robust security Self-Encrypting Drive family. For the most current management API targeted for more feature- list of drive models and part numbers, go to www. rich software management of Momentus FDE seagate.com/www/en-us/products/laptops/ drives. This requires Seagate-certified software momentus/. Note. Additional part numbers may from a third-party software vendor. ship in OEM systems. Contact the OEM to ensure • Enhanced ATA Security API—Seagate the system contains the correct drives. Enhanced ATA Security API can be used if you wish to authenticate the SED drive using Drive State Upon Shipment BIOS passwords instead of using third-party Two security management application software. programming interfaces (APIs) are available on the drives as shipped: 2 Seagate® Momentus® FDE Self-Encrypting Drive Self-Qualification Kit Drive Installation Seagate has tested a large population of systems with these components and found 100 percent of Upon shipment, the Momentus FDE drive is the systems to be compatible with pass-through. fully encrypting, yet authentication is not yet Refer to Appendix B for the complete list of established, and therefore not required to access systems tested. the drive. The drive may be installed in a system and/or imaged the same as any non-encrypting Pass-Through Verification hard drive. Following installation, the drive may be configured to operate in either the DriveTrust Seagate provides a pass-through verification tool Security API or the ATA Security API mode as for system verification of pass-through capability. shown below. The pass-through verification tool is available at www.seagate.com/support/sedqual. Drive Trust Security API Using Third-Party Note. This pass-through testing may be Software Management performed on existing non-FDE drives before purchasing/testing with FDE drives. Pass-Through Considerations The Drive Trust Security API utilizes the ATA Third-Party Security Management Software Trusted Send and Trusted Receive commands The following companies have been certified by as defined in the ATA-8 specification. Since Seagate for support of Momentus FDE Self- these are newer and optional commands in the Encrypting Drives via the DriveTrust Security ATA command set, many chipsets, drivers and API. They have developed security management operating systems do not natively support these software for single-user and enterprise-level commands. As a result, these commands are management of the Momentus FDE SEDs. delivered to the drive via the existing “pass- Contact them directly for software qualification through” mechanisms. assistance and to obtain a trial version of their Seagate has done extensive development software. and testing and has identified the following • Secude—FinallySecure: configurations that are available on all modern http://trial.finallysecure.com systems to support pass-through: • Wave Systems Corp.—Embassy Security ATA Drivers Center: www.wave.com/products/tdm.asp • WinMagic Data Security Inc.—SecureDoc: • Use the most current versions of atapi.sys, www.winmagic.com/seagate msahci drivers, or iastor.sys Note. For the most up-to-date list of software • Intel Turbo Memory must be disabled. providers who support the Momentus FDE SEDs, • RAID must be disabled. go to www.seagate.com/security. Operating Systems Seagate maintains a security software • Windows XP SP1 or newer compatibility lab to test the Momentus FDE SEDs with each certified software vendor. This testing • Windows Server 2003 has demonstrated broad compatibility across a • Windows Vista RTM + Hotfix KB950096 large number of systems while using the identified • Windows Vista SP1 + Hotfix KB943170 third-party management software packages. Refer to Appendix A for a complete list of systems and software tested. ATA Security API Using BIOS Management 3 Seagate® Momentus® FDE Self-Encrypting Drive Self-Qualification Kit System Considerations For further assistance and more information on Seagate Momentus FDE SEDs, refer to the To use the ATA Security API, the system integrator following: will need to determine if the BIOS supports the setting of hard drive passwords. A typical way • Seagate FDE Self Encrypting Drives: to verify this is to access the BIOS setup screen www.seagate.com/security by pressing a particular Function key (Fn) during For system integration assistance follow the power-on, then navigate to the security or storage Security Integrators link. pages and find the drive password-setting • Seagate Customer Service: function. Phone: 1-800-SEAGATE (1-800-732-4283) • Web: www.seagate.com/www/en-us/about/ Qualification Procedure contact_us Upon verification of system BIOS capability, the For further assistance with third-party software system integrator just needs to set the hard drive integration, see your software providers. password in the BIOS to complete the validation, as follows: Appendix A. 1. Upon system power-on, access the BIOS- DriveTrust™ Security API Systems Tested setting menu (typically a function key). The following systems have been tested in the 2. Access the ATA Security Hard Drive password- DriveTrust Security API mode. Note that the setting menu (typical label is “HDD password”). absence of a particular system only means 3. Set the hard drive password according to the that it has not been tested and does not menus. imply incompatibility or compatibility. Broad compatibility shown below suggests there will be 4. Follow the instructions for saving and re- good compatibility on a large majority of systems booting. (Your drive is now under password across the notebook market. For all systems, control) system integrators should perform the testing 5. On the subsequent power-up, the BIOS will procedures documented in this kit to ensure detect the “locked” drive and request the correct operation. password prior to booting the system. Note. “Pass” indicates a tested and passing case. 6. Enter the password. The hard drive is now Blank squares represent a test case that cannot unlocked, and the system will boot. occur for the target system or a test case Seagate 7. On subsequent power-up events, repeat from has not included in the demonstration of broad step 5. compatibility. Seagate attempts to verify Momentus FDE drive compatibility in as many systems as possible. To date, 100 percent of systems with BIOS hard drive password capability that have been tested have passed in ATA Security Mode. For additional questions regarding system capability for BIOS setting of hard drive passwords, see your BIOS or system provider. Further Assistance 4 Seagate® Momentus® FDE Self-Encrypting Drive Self-Qualification Kit Summary Status of Wave Systems v1.14.03.000 Chipset Chipset System BIOS Mode Win XP SP3 Win Vista SP1 Manufacturer Southbridge Model AHCI / ATA AHCI ATA AHCI ATA Acer Aspire 5680 No / Yes Pass Pass Asus A8Jr No / Yes Pass Pass Dell Latitude D520 No / Yes Pass Dell Latitude D620 No / Yes Pass Dell Latitude D820 No / Yes Pass Intel ICH-8M HP NC8430 Yes / Yes Pass Pass HP NX6320 Yes / Yes Pass Pass Lenovo Thinkpad T60 Yes / Yes Pass Pass Pass Pass Lenovo Thinkpad X60 Yes / Yes Pass Pass Pass Pass Panasonic CF-19 Yes / No Pass Asus F9S Yes / Yes Pass Pass Pass Pass Asus G2S Yes / Yes Pass Pass Pass Pass Asus U6Sg Yes / Yes Pass Pass BenQ Joybook S32W Yes / No Pass BenQ Joybook S41 Yes / No Pass Dell Latitude D530 Yes / Yes Pass Pass Pass Pass Dell Latitude D630 Yes / Yes Pass Pass Dell Latitude D830 Yes / Yes Pass Pass Dell Vostro 1400 Yes / Yes Pass Pass Dell Vostro 1500 Yes / Yes Pass Pass Pass Pass Dell XPS M1330 Yes / Yes Pass Pass Pass Pass Fujitsu Lifebook A6030 Yes / Yes Pass Pass Pass Pass Fujitsu Lifebook E8410 Yes / Yes Pass Pass Pass Pass Intel ICH-8M HP Compaq 6910p Yes / Yes Pass Pass Pass Pass HP Compaq 8510p Yes / Yes Pass Pass Pass Pass Lenovo Thinkpad T61 Yes / Yes Pass Pass Lenovo Thinkpad T61 Yes / Yes Pass Pass LG R405s Yes / Yes Pass Pass NEC VERSA E6310 Yes / Yes Pass Pass NEC VERSA S5500 Yes / Yes Pass Pass Packard Bell EasyNote 12-in.