Innodisk 3MR2-P 128GB, Руководство пользователя

Страница: 33 / 45

2.5” SATA SSD 3MR2-P
33 Rev 1.0 TPS, Apr., 2017
3.13.2 2.5” SATA SSD 3MR2-P with AES Flow Chart
In order to complete the physical security layer of protection, encryption needs to be paired with an
ATA user password by ATA security command. After setting the authorized key by ATA security
command, every time when you power on the system with SSD encrypted, you will be requested for
a password to access the SSD. If the password is correct, the SSD will run well; if not, then you will
not be able to access the SSD then.
3.13.3 Encrypted Key Management
Innodisk 3MR2-P SSD includes two methods of key management to apply to different applications.
The first is a standard approach that allows the firmware to generate a random number and a
unique key when it leaves the factory. This method ensures that the user can easily apply the SSD
with the data encrypted key. Another approach is to meet unique customer requirements with an
encrypted key generated by an SSD from the SATA interface host. The SSD must keep the
encrypted key value when receiving the reset commands. This method works best for the SSD as
a removable device in different systems. Innodisk provides the test tool to execute the AES
hardware encryption. This user-friendly tool, developed by Innodisk Corporation, allows the
customer to use/test encryption functions.
3.13.4 Authorized Key Management
In order to complete the physical security layer of protection, encryption needs to be bundled with
an ATA user password provided by an ATA Security command. Unlike the AES key, the authorized
key must be set by the user via the BIOS configuration. Every time you power on the system with
SSD encryption, a password request prompt is sent to access the SSD. If the password is correct,
the SSD will run well; if not, you will not be able to access the SSD.
Command Command Code
SECURITY SET PASSWORD 0XF1
SECURITY UNLOCK 0XF2
SECURITY ERASE PREPARE 0XF3
SECURITY ERASE UNIT 0XF4
SECURITY FREEZE LOCK 0XF5