Rich Freeman on 19 Apr 2015 11:53:26 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] Help with encrypted SSD


On Sat, Apr 18, 2015 at 8:50 PM, Lee H. Marzke <lee@marzke.net> wrote:
> I have Ubuntu on a 500GB Crucial SSD that is running out of space.
>
> It's using 250G encrypted LVM partition and 250G unencrypted for VM's and Downloads
>
> I need to expand both to 500G for a new 1TB SSD.
>
> I don't mind re-installing if required,  but I see the encrypted LVM
> installer only uses the entire disk not 1/2.

You should be able to dd both partitions over to the drive, then
expand the lvs, filesystems, etc on top.

>
> I tried setting the HD password on my Thinkpad for the new disk
> and when booting the BIOS prompts for the password to un-encript
> but it doesn't work, all passwords fail, and won't let me into the BIOS again to
> change/remove the password.    So basically this new 1TB SSD is
> just a paperweight now.   Anyone now why HD BIOS passwords don't work  or how
> to fix or should I just return this drive?
>

HD passwords are completely separate from software encryption like
luks/losetup/etc.  I have no idea what your BIOS is doing - the
password being sent to the drive may or may not be identical to the
password entered into the BIOS.  Also, the BIOS may or may not
security freeze the drive at bootup.

If you don't know the HD password then security erasing and getting it
back to factory condition requires vendor-specific commands as far as
I'm aware.  You're going to have to google for details on your drive.
The vendor software might help.

Personally, I wouldn't mess with the drive security.  Use software
encryption.  It gets the same job done, and since you know the key it
also makes the drive far more recoverable if you get into trouble.

--
Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug