1194 HfdeUtil command improvements

Prev Next

HfdeUtil command line tool improvements

1. Improvement for all commands requiring DBK and ENC as arguments

If DBK file is specified, ENC file specification may be omitted if appropriate ENC file exists at same path:

HfdeUtil -r -k c:\W363YTR.DBK \\.\\PhysicalDrive0

In the above example the tool will be first trying to use ENC file if it exists at same path as DBK one (i.e. c:\W363YTR.ENC).

2. Improvement for "Enroll SED" (-c) command

New "Enroll SED" command functionality design is the following:

* If DBK/ENC files are not specified, new DBK/ENC are created at current path if correspondent files don't exist. If they exist, existing files are used.
* If DBK/ENC files are specified, they will be used regardless of whether DBK/ENC exist at current path or not.

3. Improvement for "Crypto-erase SED" (-w) command

Once pin for crypto-erase operation may be arbitrarily rebuild, DBK/ENC files may not be specified:

HfdeUtil -w \\.\\PhysicalDrive0

In the above example specifying of DBK/ENC are optional.

4. New "PSID Revert" (-W) command is added

New "PSID Revert" command allows to reset SED to factory default state:

HfdeUtil -W -P HE785RR9N6S9OPJQ854XXJ90TTZ564FL \\.\\PhysicalDrive0

where <-P> is 32 number & capital letter sequence that can be found at the top of the drive label.

5. New "Sanitize" (-S) command is added

New "Sanitize" command is similar to crypto-erase command for not enrolled (i.e. in factory default state) TCG Enterprise drives:

HfdeUtil -S \\.\\PhysicalDrive0

The command is intended to check pins and eradicate the current data encryption key.\

NOTE: The above was drawn from Confluence article here: https://confluence.winmagic.local:8443/display/PDBT/HfdeUtil+command+line+tool+improvements