I'm trying hdparm in Kali Live to add a ATA password to my Micron M600 Self-encrypted SSD, I use: hdparm --security-set-pass PASSWORD sda
But I get:
sda: Issuing SECURITY_SET_PASS command, password="PASSWORD",
user=user, mode=high SG_IO: bad/missing sense data, sb[]: 70 00 05 00
00 00 00 0a 04 51 60 00 21 04 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00
So why does this happen?
When I type hdparm -I sda
, it shows my drive is "security frozen", I remember that means I cannot change any security settings including add ATA password, is that the problem?
My BIOS doesn't support ATA password, and I've never set it before.
EDIT: The Security part of hdparm -I
:
Security:
Master password revision code = 65534
supported
not enabled
not locked
frozen
not expired: security count
supported: enhanced erase
2min for SECURITY ERASE UNIT.
2min for ENHANCED SECURITY ERASE UNIT.
The format on this website is always messed up, but I try my best to keep the contant readable.
Best Answer
Partial answer, because it's too long for a comment:
The sense data given reads:
So the error is "Illegal Request, Unaligned Write Command". That doesn't make particular sense if
hdparm
is using an ATA writethrough SCSI command.I have no idea why this happens. If it's the reaction to the "security frozen" state, it's a really strange reaction. Possibly something in the SCSI-to-SSD translation layers doesn't like the ATA write through command?
Do you know for sure the Micron M600 SSD supports ATA passwords?
Edit: The manual you linked says:
So if your BIOS doesn't enable it, it won't work. "Frozen" just means you can't change the state.
Please edit your question with the full output in the Security section of
hdparm -I
.Edit
The
hdparm -I
output clearly says "not enabled", but "frozen". So your BIOS didn't enable it, but froze, so you can't change the state.That means your SSD is in TCG Opal mode, and I've no idea how to access that under Linux.
Power cycling it while plugged is worth a try.
If you can find another computer with a BIOS that let's you set the password, or that doesn't freeze it, you can try it that way, too.