-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
- HP Community
- Desktops
- Business PCs, Workstations and Point of Sale Systems
- How to enable NVMe Self Encrypting Drive (SED) on HP z840?

Create an account on the HP Community to personalize your profile and ask a question
08-20-2023 04:27 PM
I spent almost a week of my vacation trying to make the SED work. I am not interested in ATA sata lock which I don't have any such drive. I am only interested in true native hardware encrypted SED drive. Which BTW I suppose you know those drives are already hardware encrypted at rest. It's just that when the Authentication-Key (AK) is not provisioned, the drive is unlocked. Which means the Data Encryption Key (DEK) could be retrieved by any machine. Which is the factory default settings.
I know quite well the sedutil your referred to. And I have read all the docs about SED and I know what the OPAL 2.0 standards is. In my initial post, I have given enough link. And the post clearly focused about Self-Encrypting-Disk. There was no mention, no need and no ask about ATA Drive Lock.
In my today answer, I said that I get past the provisioning part (using sedutil). The PreBoot-Authentication screen did come up. The screenshot below shows I could get past the PBA to unlock the drive
It was the handover from PBA to HP BIOS to continue the booting process which had failed. I didn't mention but I had also experiment with a Lenovo T580 laptop using an Intel Pro 7600p NVMe. SED provisioning also failed with a totally different error than the z840. Here it was the NVMe drive firmware itself which ignores write commands from sedutil.
In case you have a z840 handy, to have a practical experience on the matter, how about trying to provision a SED yourself ?
- « Previous
-
- 1
- 2
- Next »