Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- security Update or report security settings, using an ATA identify
- command (0xec). By default, camcontrol will print out the
- security support and associated settings of the device. The
- security command takes several arguments:
- -d pwd
- Disable device security using the given password for the
- selected user according to the devices configured security
- level.
- -e pwd
- Erase the device using the given password for the selected
- user.
- WARNING! WARNING! WARNING!
- Issuing a secure erase will ERASE ALL user data on the
- device and may take several hours to complete.
- When this command is used against an SSD drive all its
- cells will be marked as empty, restoring it to factory
- default write performance. For SSD's this action usually
- takes just a few seconds.
- -f
- Freeze the security configuration of the specified device.
- After command completion any other commands that update the
- device lock mode shall be command aborted. Frozen mode is
- disabled by power-off or hardware reset.
- -h pwd
- Enhanced erase the device using the given password for the
- selected user.
- WARNING! WARNING! WARNING!
- Issuing an enhanced secure erase will ERASE ALL user data
- on the device and may take several hours to complete.
- An enhanced erase writes predetermined data patterns to all
- user data areas, all previously written user data shall be
- overwritten, including sectors that are no longer in use
- due to reallocation.
- -k pwd
- Unlock the device using the given password for the selected
- user according to the devices configured security level.
- -l high|maximum
- Specifies which security level to set when issuing a -s pwd
- command. The security level determines device behavior when
- the master password is used to unlock the device. When the
- security level is set to high the device requires the
- unlock command and the master password to unlock. When the
- security level is set to maximum the device requires a
- secure erase with the master password to unlock.
- This option must be used in conjunction with one of the
- security action commands.
- Defaults to high
- -q
- Be quiet, do not print any status messages. This option
- will not disable the questions, however. To disable ques-
- tions, use the -y argument, below.
- -s pwd
- Password the device (enable security) using the given pass-
- word for the selected user. This option can be combined
- with other options such as -e pwd
- A master password may be set in a addition to the user
- password. The purpose of the master password is to allow an
- administrator to establish a password that is kept secret
- from the user, and which may be used to unlock the device
- if the user password is lost.
- Note: Setting the master password does not enable device
- security.
- If the master password is set and the drive supports a Mas-
- ter Revision Code feature the Master Password Revision Code
- will be decremented.
- -T timeout
- Overrides the default timeout, specified in seconds, used
- for both -e and -h this is useful if your system has prob-
- lems processing long timeouts correctly.
- Usually the timeout is calculated from the information
- stored on the drive if present, otherwise it defaults to 2
- hours.
- -U user|master
- Specifies which user to set / use for the running action
- command, valid values are user or master and defaults to
- master if not set.
- This option must be used in conjunction with one of the
- security action commands.
- Defaults to master
- -y
- Confirm yes to dangerous options such as -e without prompt-
- ing for confirmation.
- If the password specified for any action commands doesn't
- match the configured password for the specified user the com-
- mand will fail.
- The password in all cases is limited to 32 characters, longer
- passwords will fail.
Add Comment
Please, Sign In to add comment
