All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: Encrypted W30NMRRW
PostPosted: December 4th, 2017, 12:40 
Offline

Joined: December 4th, 2017, 12:15
Posts: 5
Location: Cleveland, OH
Dear colleagues-

I got a problem with W30NMRRW PebbleB drive, originally USB, PCB changed to a compatible SATA with ROM transfer. Looks like no problems with heads or platters, modules in SA can be read with no errors.

Still there's no access to user area - the drive is giving DRD, DWF, ERR and ABR for every sector in user zone.

The drive is SED locked, if I remove "SED Lock" checkmark under "Edit Drive's ID" - sectors in user area can be read, look encrypted, PC3000 is not able to find encryption key...

Any ideas?

Thanks for your help!


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 4th, 2017, 14:26 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
Does the drive give full ID or is in Kernel mode?

Regardless of whether it "looks like" there are issues with heads, I'd assume there might be. I'd start by editing headmap in RAM to disable all but head 0, then see if you can read sector 0. If you can, then you just have to systematically turn heads back on until you figure out which one(s) are causing the problem.

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 4th, 2017, 15:48 
Offline

Joined: December 4th, 2017, 12:15
Posts: 5
Location: Cleveland, OH
data-medics wrote:
Does the drive give full ID or is in Kernel mode?

Regardless of whether it "looks like" there are issues with heads, I'd assume there might be. I'd start by editing headmap in RAM to disable all but head 0, then see if you can read sector 0. If you can, then you just have to systematically turn heads back on until you figure out which one(s) are causing the problem.


It gives full ID and I already mentioned that with SED lock removed I have full access to user area but data is encrypted with no key found - to my knowledge at this time PC3000 utility has no support for SED encryption :(


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 4th, 2017, 16:16 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
I guess I missed that part of your post.

Have you tried cloning to see if you get a lot of bad sectors? It may ultimately come down to having to buy another PebbleB drive, clone the encrypted data to the good one, then put the USB PCB back on it to decrypt the data. Had to do that a few times back before PC-3000 supported on the fly decryption.

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 4th, 2017, 16:37 
Offline

Joined: December 4th, 2017, 12:15
Posts: 5
Location: Cleveland, OH
data-medics wrote:
I guess I missed that part of your post.

Have you tried cloning to see if you get a lot of bad sectors? It may ultimately come down to having to buy another PebbleB drive, clone the encrypted data to the good one, then put the USB PCB back on it to decrypt the data. Had to do that a few times back before PC-3000 supported on the fly decryption.


Yeah, I remember these times :D


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 4th, 2017, 16:41 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15461
Location: Australia
data-medics wrote:
Have you tried cloning to see if you get a lot of bad sectors? It may ultimately come down to having to buy another PebbleB drive, clone the encrypted data to the good one, then put the USB PCB back on it to decrypt the data. Had to do that a few times back before PC-3000 supported on the fly decryption.

I thought that SEDs were "self encrypting". That is, the key is stored on the drive itself, not in the bridge, or am I missing something?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 4th, 2017, 17:33 
Offline

Joined: December 4th, 2017, 12:15
Posts: 5
Location: Cleveland, OH
fzabkar wrote:
data-medics wrote:
Have you tried cloning to see if you get a lot of bad sectors? It may ultimately come down to having to buy another PebbleB drive, clone the encrypted data to the good one, then put the USB PCB back on it to decrypt the data. Had to do that a few times back before PC-3000 supported on the fly decryption.

I thought that SEDs were "self encrypting". That is, the key is stored on the drive itself, not in the bridge, or am I missing something?


You are right, I think in this particular case something went wrong with SED decryption mechanism and stored keys no longer work for any reason


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 5th, 2017, 2:27 
Offline
User avatar

Joined: July 19th, 2017, 2:05
Posts: 109
Location: Dubai
HI,
try this from ACE,

Add from folder button can’t find the key, so you should try Add from file one, and manually select 38 module:

_________________
Specialized in Physical Data Recovery

https://lifeguarddatarecovery.com


Top
 Profile  
 
 Post subject: Re: Encrypted W30NMRRW
PostPosted: December 5th, 2017, 8:20 
Offline

Joined: December 4th, 2017, 12:15
Posts: 5
Location: Cleveland, OH
lifeguarddubai wrote:
HI,
try this from ACE,

Add from folder button can’t find the key, so you should try Add from file one, and manually select 38 module:


No, it's not adding neither from 38-th nor from 25-th


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group