Encryption

[WebClaw]

Hi all;

Wondering if anyone can provide some insight / suggestions.

Charger drive came in, MOD190 was not readable. Noted issues with H1.

- Read ROM, did unlock.
- Using the native USB PCB, I removed the caps and crystal. PC3000 now talking to the drive using SATA.
- Replaced the heads, drive now reads.
- Block UA and started FW backup.
( there is no UA access via ATA at this point). Reading UA by Utility shows encrypted data.
- SEDv2 enabled in 02.

- PC3000 shows no issues with T2.
- Reviewed what FW modules were read and the following were read, but have CRC errors.

24
123
124
126
D003 <- "Crypto Data"
D004 <- "Crypto Data"

Attachments

[fzabkar]

Those CRC errors are normal:

https://groups.google.com/g/datarecoverycertification/c/jcma8ZYbnVs/m/RRnVvSwtBAAJ

In future you could avoid removing the crystal. Instead, you could ground the reset pin.

Locating the Reset* pin on USB-SATA bridge ICs:

https://www.hddoracle.com/viewtopic.php?p=24481#p24481

[pepe]

i can't see why would it be normal for D00x mods to have bad CS. check content . Also, what error is posted uppon UA access?

[WebClaw]

Thank you both for your posts. I've read the ground pin documentation you provided and will use that going forward.

Pepe, I get ABR when reading via ATA and if I use terminal (HDD translates) I get encrypted data.

Code:

Family:................................. : Charger 2.5"
Techno mode key......................... : Ok

HDD Status sector....................... : Ok

RAM:
System controller (SoC)................. : 88i1053A0 0x(5460)
HDD Info reading........................ : Ok
Heads number............................ : 4
Cyl Count............................... : 384

ROM:
Read ROM................................ : Ok
ROM Data size........................... : 1024 Kb
Flash ROM dir reading................... : Ok (Active)
Flash ROM dir reading (Ext)............. : Ok
Modules directory address............... : 0
SA regions address...................... : by default
SA regions address (RAM)................ : by default
Module 02 access........................ : Granted

WWN..................................... : 50014EE2C001B5A4

SA SPT.................................. : 1860

SA Translator loading................... : Ok
SA defects assigned..................... : 4

ROM Modules:
ROM version............................. : 06.8MD
Module 4F F/W version................... : 0076008M
Overlay F/W version..................... : 06.8ND
Servo F/W version....................... : 04.09

Heads configuration..................... : by map
Heads number............................ : 4
Heads number in use..................... : 4
Switched off heads...................... : No
Heads map............................... : 0,1,2,3

Relocations............................. : 0 (2 501)
Read ROM DCM............................ : Ok

Power up log reading.................... : Ok
Power up load dir data.................. : Yes
Power up load permovl................... : Yes
Power up load CFG data.................. : Yes
----+------+--------+------------------+----------+----------------------------------------------
NN | Step |   Time |            Flags |     Info | Description (64-bits)                       
----+------+--------+------------------+----------+----------------------------------------------
68 |  227 | 4.64 s | 14000401217FFDFF | 51043746 | Load GPD-List (13A)(FM ERR NOT FOUND IN DIR)
89 |  223 | 5.47 s | 1C2884216FFFFDFF | 51043D9C | End Process 190(GPD-List (13A) not found)   
----+------+--------+------------------+----------+----------------------------------------------

Service area:
SA dir reading (ID)..................... : Ok
Dir items loaded........................ : 611

SA Access............................... : Copy 0,Copy 1

Configuration reading................... : Ok
CFG tech mode lock...................... : No
Self encryption drive................... : Yes (Attention! SED mode is active in 02)
SED Info read........................... : Ok
Master Password......................... : Yes
User Password........................... : No
SED tech mode lock...................... : No
UA writing.............................. : Blocked

DCM in module 47........................ : ZP
DCM in module 0A........................ : |R|NZPGCN6
DCM in module 02........................ : S|BRL|PNMZHPCGRCVNKUUG

To be able to create utilty based DE task, start "Prepare to get UA PBA access"


Attachments

[pepe]

sorry, i meant the extended error code.

[gps31]

Thank you both for your posts. I've read the ground pin documentation you provided and will use that going forward.

Pepe, I get ABR when reading via ATA and if I use terminal (HDD translates) I get encrypted data.

Code:

Family:................................. : Charger 2.5"
Techno mode key......................... : Ok

HDD Status sector....................... : Ok

RAM:
System controller (SoC)................. : 88i1053A0 0x(5460)
HDD Info reading........................ : Ok
Heads number............................ : 4
Cyl Count............................... : 384

ROM:
Read ROM................................ : Ok
ROM Data size........................... : 1024 Kb
Flash ROM dir reading................... : Ok (Active)
Flash ROM dir reading (Ext)............. : Ok
Modules directory address............... : 0
SA regions address...................... : by default
SA regions address (RAM)................ : by default
Module 02 access........................ : Granted

WWN..................................... : 50014EE2C001B5A4

SA SPT.................................. : 1860

SA Translator loading................... : Ok
SA defects assigned..................... : 4

ROM Modules:
ROM version............................. : 06.8MD
Module 4F F/W version................... : 0076008M
Overlay F/W version..................... : 06.8ND
Servo F/W version....................... : 04.09

Heads configuration..................... : by map
Heads number............................ : 4
Heads number in use..................... : 4
Switched off heads...................... : No
Heads map............................... : 0,1,2,3

Relocations............................. : 0 (2 501)
Read ROM DCM............................ : Ok

Power up log reading.................... : Ok
Power up load dir data.................. : Yes
Power up load permovl................... : Yes
Power up load CFG data.................. : Yes
----+------+--------+------------------+----------+----------------------------------------------
NN | Step |   Time |            Flags |     Info | Description (64-bits)                       
----+------+--------+------------------+----------+----------------------------------------------
68 |  227 | 4.64 s | 14000401217FFDFF | 51043746 | Load GPD-List (13A)(FM ERR NOT FOUND IN DIR)
89 |  223 | 5.47 s | 1C2884216FFFFDFF | 51043D9C | End Process 190(GPD-List (13A) not found)   
----+------+--------+------------------+----------+----------------------------------------------

Service area:
SA dir reading (ID)..................... : Ok
Dir items loaded........................ : 611

SA Access............................... : Copy 0,Copy 1

Configuration reading................... : Ok
CFG tech mode lock...................... : No
Self encryption drive................... : Yes (Attention! SED mode is active in 02)
SED Info read........................... : Ok
Master Password......................... : Yes
User Password........................... : No
SED tech mode lock...................... : No
UA writing.............................. : Blocked

DCM in module 47........................ : ZP
DCM in module 0A........................ : |R|NZPGCN6
DCM in module 02........................ : S|BRL|PNMZHPCGRCVNKUUG

To be able to create utilty based DE task, start "Prepare to get UA PBA access"


Can u upload your full SAbackup?