HfdeUtil command line tool improvements
1. Improvement for all commands requiring DBK and ENC as arguments
If DBK file is specified, ENC file specification may be omitted if appropriate ENC file exists at same path:
HfdeUtil -r -k c:\W363YTR.DBK \\.\\PhysicalDrive0
In the above example the tool will be first trying to use ENC file if it exists at same path as DBK one (i.e. c:\W363YTR.ENC).
2. Improvement for "Enroll SED" (-c) command
New "Enroll SED" command functionality design is the following:
* If DBK/ENC files are not specified, new DBK/ENC are created at current path if correspondent files don't exist. If they exist, existing files are used.
* If DBK/ENC files are specified, they will be used regardless of whether DBK/ENC exist at current path or not.
3. Improvement for "Crypto-erase SED" (-w) command
Once pin for crypto-erase operation may be arbitrarily rebuild, DBK/ENC files may not be specified:
HfdeUtil -w \\.\\PhysicalDrive0
In the above example specifying of DBK/ENC are optional.
4. New "PSID Revert" (-W) command is added
New "PSID Revert" command allows to reset SED to factory default state:
HfdeUtil -W -P HE785RR9N6S9OPJQ854XXJ90TTZ564FL \\.\\PhysicalDrive0
where <-P> is 32 number & capital letter sequence that can be found at the top of the drive label.
5. New "Sanitize" (-S) command is added
New "Sanitize" command is similar to crypto-erase command for not enrolled (i.e. in factory default state) TCG Enterprise drives:
HfdeUtil -S \\.\\PhysicalDrive0
The command is intended to check pins and eradicate the current data encryption key.\
NOTE: The above was drawn from Confluence article here: https://confluence.winmagic.local:8443/display/PDBT/HfdeUtil+command+line+tool+improvements