unlocking ATA password for HD502HJ

[raven4d]

Good evening ,

this HDD was installed in a laptop that the owner has used a BIOS password and sat the HDD security to ( Enabled ) so the BIOS some how generated a random ATA password and locked the drive with ..

now the laptop is broken , and after extracting the HDD ( and swapping heads as this was the initial problem ) am stuck with bypassing the ATA password , tried the default passwords along with the user BIOS passwords with no luck ..

any ideas ?

[drHDD]

look here viewtopic.php?f=1&t=28590

[raven4d]

look here viewtopic.php?f=1&t=28590

thanks for the reply , but i already looked there , and this SHT tool is not abl to communicate with the HDD , although i am able to see the full log using windows hyper terminal ...

so the pins connection is good , but somehow , this piece of software is not working ..

any way i can extract modules using hyper terminal commands ?

thanks

[helpless]

HD502HJ is a desktop model, how was that installed in a laptop?
You have to set the correct ide port in SHT in order that it should detect it.
And also you have to connect the hdd before the pc is started (it should be detected by BIOS).

[alligatorbirne]

Dumb questions,

is the SATA controller configured as IDE mode (no AHCI mode or RAID mode)?

[raven4d]

HD502HJ is a desktop model, how was that installed in a laptop?
You have to set the correct ide port in SHT in order that it should detect it.
And also you have to connect the hdd before the pc is started (it should be detected by BIOS).

honestly , I have no clue how this HD502HJ poped up to the surface !!! was I that tired

my HDD is HM500JI , and as heads were swapped , i cant risk plugging it to windwos machine , SHT tools has the ability to communicate with HDD using RX-TX which is the better option i think ,

thanks for passing by the thread

[raven4d]

Dumb questions,

is the SATA controller configured as IDE mode (no AHCI mode or RAID mode)?

Hii

yes , AHCI is set to disabled ... i tried another HDD and it was detected normally

[raven4d]

ok , i managed to get SHT tool to work , log is
----------------------------------------------------
*PA VID=0007 PN=0000 Rev=0004*PA VID=0007 PN=0000 Rev=0004PSL U
S_0Shock Sensor Circuit Enabled
SO_1
Shock Sensor Circuit Enabled
Init RPM=0
IS=1
CLA #36/74
Handoff RPM=597
SPOK
mS1 00000003
A1O=2 A1G=392
O=510 S=-2
SK C: 4581 H:0
Loaded FIT ( 0: 0: 1)
Reso Table Loaded
RRO1X Read OK
Overlay Code Loaded to 0x1004A000
FdtTable Loaded. Rev:0x01
| 19 | RLIST | 3 | 0 | 128 | 1140 |
Reading Serial Num Pass
Up MC

PwrOn RRO1x @ H0
Table) cos = -1094400, sin = 221952
Coeff) cos = 71795, sin = -174930

DiskSlip : 102 [SrvTrk]
DiskSlip : 95 [SrvTrk]

PwrOn RRO1x @ H2
Table) cos = -1094144, sin = 226048
Coeff) cos = 36090, sin = -158405

DiskSlip : 102 [SrvTrk]
DiskSlip : 97 [SrvTrk]
TgtCyl: 842
Hd: 0 Zn: 0 Avg.:- 191
TgtCyl: 169771
Hd: 0 Zn: 1 Avg.: 847

SVCAL(0080,0000)-->PASS
RecordValid Ok : 0107E47D 0107E41D
ReadyTime = 5900 ms
PwrOn NoLink
ENG>mS1 00000003
SK C:102243 H:0
SoUL!
PK_4 C: 8493 H:0
----------------------------------------------------

but cant read any module .. is it because the HDD security has been enhanced since the old samsungs can give access to modules even if the drive is locked ? or is it a software limitation ?

thanks

[Moltke]

You can't do that with terminal only.

on almost any Samsung available work with the service area using only the terminal

[Moltke]

Unless you provide an easy way to WRITE to the security module by TTL the best option the user will have is to use the SHT full version.

who told you that you need to edit the module SECURITY ?
+there's a hash,what you will achieve by editing ?

[Moltke]

I would copy a clean module from unlocked drive to the ocked one ?

?
then it is better to write the module with a known password and then take it off

[raven4d]

greetings again

the disk has a swapped heads , so mounting it to a windwos is not practical , but since it's locked , windwos will not mount it or read from it , so i mounted it , but still SHT couldnt ID the drive ..

any way i can read the module 16 by ttl ? or at least overwrite it using terminal commands ?

many thanks in advance for the help , especially that if the data was note recovered , i will not get paied for the heads swap operation as well

[helpless]

1. Install a good sata drive, power on your pc. Open SHT and check if it sees correctly.
2. In device manager disable the controller, the drive is connected to.
3. Remove the drive from the system (= remove power then data cable).
4. Connect the locked drive, (connect data then power cable) and SHT should see it.
5. Do whatever you want.