SEAGATE: Non Standard ATA Master Password

[TDII]

Patient HDD:
Momentus 4200.2
100GB
Model: ST9100822A
FW:3.01

I have came across this drive with a non default master password and an unknown user password.

I would like to disable the ata password and the data is not important.

So far I have ran the drive with SeDiv, Read the Vendor track...

On the patient drive it looks like this:
00 00 08 00 07 00 0a 00 0b 00 07 00 02 00 0b 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00
aka "=00=00=00=08=00=07=00=0A=00=0B=00=07=00=02=00=0B=00=00=00=00=00=00=
=00=00=00=00=00=00=00=00=00=00=00=00" //Looks like a hex password...

Where as other drives with the defualt master password looks like this:
01 00 53 65 61 67 61 74 65 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20

aka "=01=00Seagate " //Pretty straight forward...

So... how the heck do i unlock a drive with a hex master password... or am i missing something here... Reply please, or PM if you prefer.

-Thanks
-DirkaDirka

[TDII]

I am so far just in research mode... I am not getting paid for any of this stuff so i have not purchsed anything besides the good ol' MAX232...
I will try the Victoria tomorrow... Thanks..

[TDII]

Seek to Vendor Track, Read Track, Copy Read Bufer to Write Buffer, Edit Buffers First Byte to 00, wrote the Buffer back to the drive.
Data still intact.. WOW NICE
thx for the tips... also thanks to Samo too...

[TDII]

Code:

Interface task reset
4096k x 16 buffer detected
MERC2 - 1_Disk    3.05  08-
Buzz  - 21-03 17:29
Head Mask 0F,01 - Switch to full int.
              Spin Ready
Dwell Cyl - 09BD/0850/0875
(
T>
BT:0000
AP:0060
MW:0297:00A3
AL:0048
RL:0294
SL:033A
AT:03FD

RD:03FD:0010
WR:040D:0010
FM:041D:0010
AD:041D:0014
BA:042D:0003
ST:0430:0001
AS:0431:007F
DP:04B0:01FF
AC:04B0:01FF
SC:06AF:0200
TB:08E3:0020
SO:0903:0030
CT:3B80
uP:3FC0
MZ:3FC6

logbps :0200
codebps:0200
T>((VALID Cert Disk Code Detected - Revision # 022

T>G1
T>/2
2>r,6,10
2>C3FD,,10
2>B40D
buffer 040D   comparing to 040D  RD:03FD:10:00  WR:040D:10:00
Addr  0 1 2 3  4 5 6 7  8 9 A B  C D E F 10 1 2 3  4 5 6 7  8 9 A B  C D E F
081A00 01005365 61676174 65202020 20202020 20202020 20202020 20202020 20202020
081A20 20200000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081A40 00000420 2402FEFF 01000000 00000000 00000000 00000000 00000000 00000000
081A60 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081A80 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081AA0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081AC0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081AE0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B00 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B20 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B40 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B60 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B80 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081BA0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081BC0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081BE0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081C00 31303034 30303333 34202020 20202020 00000300 01000100 00000000 00000000
2>/1
1>U81A00

  Adr 81A00 = 01 --> 00 {Shift+Enter = Save and Edit byte again}
  Adr 81A00 = 00 --> {Ctrl+Enter = Save and Edit Next byte}
  Adr 81A01 = 00 --> {Enter = Finish}

1>B40D
buffer 040D   comparing to 040D  RD:03FD:10:00  WR:040D:10:00
Addr  0 1 2 3  4 5 6 7  8 9 A B  C D E F 10 1 2 3  4 5 6 7  8 9 A B  C D E F
081A00 00005365 61676174 65202020 20202020 20202020 20202020 20202020 20202020
081A20 20200000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081A40 00000420 2402FEFF 01000000 00000000 00000000 00000000 00000000 00000000
081A60 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081A80 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081AA0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081AC0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081AE0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B00 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B20 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B40 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B60 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081B80 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081BA0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081BC0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081BE0 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
081C00 31303034 30303333 34202020 20202020 00000300 01000100 00000000 00000000
1>/T
T>G1
T>/2
2>w,6,10
2>

[z007]

Thaks for sharing!

[guru]

thanks for losing me money.....lol

[TDII]

How much money do you charge for this service?

[drc]

Honestly after everything that has happened recently it wouldn't surprise me in the slightest if Seagate got rid of the serial interface... or at least did something to prevent end-users from using it.

[scratchy]

I think they are already testing a different interface. Looks like there is a proprietry IO connector on some boards..

[guru]

Well if they start going the way of Seagate SCSI we will have some problems :O( For my job anyway

[guru]

Obviously you don't and have a nice little number probably pushing paper in an office

How much money do you charge for this service?

[Russwinters]

My guess is it will still be Serial, but the connector itself will be proprietary.



We will just have to make our own cables =)

[bubas]

hello , i have a st3250310cs , and , one st3250312cs , 250gb , and i reed the eprom (25f512a) , but how i find the ederesse password ?

this is the eprom hex ,st3250310cs
..............................................................................................................................

Attachments

25f512a.txt

(154.03 KiB) Downloaded 3165 times

[fzabkar]

hello , i have a st3250310cs , and , one st3250312cs , 250gb , and i reed the eprom (25f512a) , but how i find the ederesse password ?

this is the eprom hex ,st3250310cs

I believe the password is stored on the platters, not on the PCB.

The solution provided in this thread entails reading the Vendor Track. You can use SeDiv to do this.

SeDiv Seagate Terminal:
http://sediv2008.narod.ru/Easy1014.rar

English documentation:
http://sediv2008.narod.ru/HelpEn.rar

See this thread:
sediv-hdd-seagate-terminal-for-windows-t11980.html

In order to get SeDiv to run, you may need to wind back your system date to the date stamp of sediv.exe.

You will need to access the drive via its TTL RS232 port. To do this, you can use an adapter such as the ones described in this thread:
http://forums.seagate.com/t5/ATA-and-Se ... 036#M19464

[bubas]

SeDiv 2008 , not support this hd

[BlackST]

There was a story about Ray Charles leading Stevie Wonder...

[dick]

SeDiv 2008 , not support this hd

I would take a second look if I were you Roll on Ray

Attachments

[BlackST]

Ray could not take even the 1st look...

[fzabkar]

SeDiv 2008 , not support this hd :( :oops:

I would take a second look if I were you :shock: Roll on Ray :lol:

Take a third look. :roll:

[bubas]

HELLO PEOPLE! one more time ! sediv not support st3250312cs,and st3250310cs.
help pls , and can i use the cable rs232_to _ttl .or a a CA-42 cell phone cable ?? help pls, and the dku-5 , (noka) , can i use this work ?
tks