#OPAL Encryption

1 messages · Page 1 of 1 (latest)

minor sluice
#

Good day everyone!
I really don't know where to start on this issue. I have a second-hand AFF A700S NAF-1603 and an NAJ-1501 DASD. This disk array came with x24 Samsung 3.84TB SSD (SED) MZ-ILS3T8A. These SSD's are OPAL locked and I can't seem to clear/revert this encryption. The previous owner has no idea what the encryption is, nor how to remove it himself. I'm kinda stranded on this, and was hoping someone might be able to guide me step-by-step on this.
I'm using PuTTY to access serial console. And my NetApp knowledge is beginner at best. I greatly appreciate any help on this.

wheat hawk
#

should be possible
Each of the disks 'should' have the PSID on the label.
This can be used via a couple of different tools to 'clear' the drive.
If you hook the disk up to a linux machine and have access to the sedutil or the Magician Datacenter toolkit, that should work.

I have a doc that has a ton of links to tools/commands if you want to go over it

minor sluice
wheat hawk
#

no problem, hopefully something in there helps

stiff swallow
#

using the PSID key

#

then resetup ONTAP

amber coral
# wheat hawk

you might want to add the sg_format --fmtpinfo=0 --pfu=0 --size=512 command to reformat E-Series disks to remove the T10-PI from them

#

but that's indeed a very comprehensive and interesting document 👍

wheat hawk
#

nice tip, thanks. I'll stick it in the notes.
The doc is just something i have been using/adding to as I get more stuff in my test area/lab and is pretty generic and not specific to any brand.
I know some brands have very specific tools that have to be used or specific commands, good to have all the nuances 😄

amber coral
#

I usually use SeaTools to reformat HDDs since I find its syntax easier to work with (why does sg_format --fmtpinfo=3 format with type 1 protection? etc.) and it works with all disks I ever tried it on 🙂

wheat hawk
#

Yea, it does work on a pretty big set of stuff, but I have found some drives with vendor firmware refuse to be recognized by anything other than the generic linux tool, or if you can find it, the specific vendor tool
Mainly, IBM/Lenovo drives.
I have around 20 'enterprise' sata drives that are clearly Samsung, yet the Samsung tools don't recognize them.
the Intel/solidigm tool sees them but does not work. yet the base linux tools work just fine.

Just random weirdness

#

and then the samsung stuff is dependant on the version of the tool based on the drives firmware/controller.. magician 2.0 vs 2.1 vs 2DC (datacenter)
Some of which aren't available on the company sites anymore and you have to dig around in places like the way back machine to get

amber coral
#

yeah and then you end up on chinese or russian HDD forum sites where you can download some manufacturing tools with a crappy chinese GUI and think "how the heck did I end up here??" 😄

wheat hawk
#

you 'hope' it's a manufacture tool

minor sluice
#

Thank you all for the support! I'm still trying to work on these SED's.
Would it be a problem if these drives were not the original drives that were in the AFF unit during the initial setup?

wheat hawk
#

it shouldn't matter, as long as they are an approved disk for that system

fast violet
#

Also make sure you use the most up-to-date disk qualification package on the system

flint talon
# wheat hawk Yea, it does work on a pretty big set of stuff, but I have found some drives wit...

Just a side note... I have had luck writing a vendor firmware to a ONTAP drive, or more specifically an E-Series FW to a ONTAP drive... I noticed that the 8TB ONTAP Spinning rust Seagate drives had the vendor PN as the E-Series drives, so I "fixed" the E-Series firmware file and managed to convert it and made it work on the E-Series.. Of cause I also had to reformat it from 520 to 512 blocks... PS: It's not all drives that are available in both ONTAP and E-Series, but many of the spinning ones are...