MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 32 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: ST1000LM048
PostPosted: September 3rd, 2025, 16:05 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
This is the "permanently unlocked" version of sys file 0x1D2. I don't know what that means, but I saw it in this thread:

https://forum.hddguru.com/viewtopic.php?f=1&t=43339

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 3rd, 2025, 16:43 
Offline

Joined: October 21st, 2007, 8:48
Posts: 1712
fzabkar wrote:
This is the "permanently unlocked" version of sys file 0x1D2. I don't know what that means, but I saw it in this thread:

https://forum.hddguru.com/viewtopic.php?f=1&t=43339

Permanent ROM unlock without sending handshake.
This is not relevant to ATA password.


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 3rd, 2025, 17:02 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Maybe 0x1D1 is a container which stores all the security related information for the drive. If individual security modules are damaged, they could be restored from the backups in the container. I still think the solution could involve replacing the unknown user password data with known master password data.

You could test the master password on your donor by setting what you think is the real master password and then comparing the before-and-after dumps of 0x30A. If you have guessed the correct master password, then I would think that the two dumps would be identical.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 4th, 2025, 4:05 
Offline

Joined: January 18th, 2010, 23:53
Posts: 346
Location: india
Upload sysfiles 1D0 1D1 1D2 227 30A


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 4th, 2025, 8:33 
Offline

Joined: October 21st, 2007, 8:48
Posts: 1712
gps31 wrote:
Upload sysfiles 1D0 1D1 1D2 227 30A


From donor drive.
Here we go :
Before and after :


Attachments:
After.rar [1.12 MiB]
Downloaded 30 times
Before.rar [1.12 MiB]
Downloaded 22 times
Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 4th, 2025, 8:36 
Offline

Joined: October 21st, 2007, 8:48
Posts: 1712
unknown wrote:
You could test the master password on your donor by setting what you think is the real master password and then comparing the before-and-after dumps of 0x30A. If you have guessed the correct master password, then I would think that the two dumps would be identical.

Testing in progress


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 4th, 2025, 13:00 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
0x1D2 can be carved out of 0x227 at 0x1C5000 - 0x1DBFFF.
0x1D2 can be carved out of 0x1D1 at 0x22000 - 0x38FFF.
0x30A can be carved out of 0x227 at 0x2F1000 - 0x2F1FFF.

The master and user ATA passwords are stored in 0x30A. They can also be carved out of 0x1D1 at 0x39000 - 0x3910F.

I believe that the master password in older Seagate drives was "Seagate" plus 25 spaces (0x20).

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 4th, 2025, 13:27 
Offline

Joined: October 21st, 2007, 8:48
Posts: 1712
fzabkar wrote:
0x1D2 can be carved out of 0x227 at 0x1C5000 - 0x1DBFFF.
0x1D2 can be carved out of 0x1D1 at 0x22000 - 0x38FFF.
0x30A can be carved out of 0x227 at 0x2F1000 - 0x2F1FFF.

The master and user ATA passwords are stored in 0x30A. They can also be carved out of 0x1D1 at 0x39000 - 0x3910F.

I believe that the master password in older Seagate drives was "Seagate" plus 25 spaces (0x20).

I tried this master password already but the two dumps after wasn't matched. So it's not the older master password.

Has anyone have this drive FW backed up ?
FW revision : 0001
Family : Janus R1

Thanks in advance


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 4th, 2025, 15:16 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Could the master password be blank? That is, what about 32 spaces (0x20) or 32 zeros (0x00)?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 5th, 2025, 12:06 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1740
Location: Verona, Italy
unknown wrote:
fzabkar wrote:
0x1D2 can be carved out of 0x227 at 0x1C5000 - 0x1DBFFF.
0x1D2 can be carved out of 0x1D1 at 0x22000 - 0x38FFF.
0x30A can be carved out of 0x227 at 0x2F1000 - 0x2F1FFF.

The master and user ATA passwords are stored in 0x30A. They can also be carved out of 0x1D1 at 0x39000 - 0x3910F.

I believe that the master password in older Seagate drives was "Seagate" plus 25 spaces (0x20).

I tried this master password already but the two dumps after wasn't matched. So it's not the older master password.

Has anyone have this drive FW backed up ?
FW revision : 0001
Family : Janus R1

Thanks in advance


MRT backup


Attachments:
ST1000LM035-1RK172-0001-WL1xxxxx.rar [17.55 KiB]
Downloaded 12 times

_________________
My firmware database:
https://mega.nz/folder/O01DkBRI


Last edited by michael chiklis on September 5th, 2025, 12:18, edited 1 time in total.
Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 5th, 2025, 12:07 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1740
Location: Verona, Italy
PC3k backup

ST1000LM048-2E7172-0001-WQ9xxxxx


Attachments:
ST1000LM048-2E7172-0001-WQ9xxxxx.rar [17.63 KiB]
Downloaded 16 times

_________________
My firmware database:
https://mega.nz/folder/O01DkBRI
Top
 Profile  
 
 Post subject: Re: ST1000LM048
PostPosted: September 6th, 2025, 8:41 
Offline

Joined: October 21st, 2007, 8:48
Posts: 1712
fzabkar wrote:
Could the master password be blank? That is, what about 32 spaces (0x20) or 32 zeros (0x00)?

Tested but didn't work.

michael chiklis wrote:
unknown wrote:
fzabkar wrote:
0x1D2 can be carved out of 0x227 at 0x1C5000 - 0x1DBFFF.
0x1D2 can be carved out of 0x1D1 at 0x22000 - 0x38FFF.
0x30A can be carved out of 0x227 at 0x2F1000 - 0x2F1FFF.

The master and user ATA passwords are stored in 0x30A. They can also be carved out of 0x1D1 at 0x39000 - 0x3910F.

I believe that the master password in older Seagate drives was "Seagate" plus 25 spaces (0x20).

I tried this master password already but the two dumps after wasn't matched. So it's not the older master password.

Has anyone have this drive FW backed up ?
FW revision : 0001
Family : Janus R1

Thanks in advance


MRT backup
michael chiklis wrote:
PC3k backup

ST1000LM048-2E7172-0001-WQ9xxxxx

Thanks a lot.
Writing sysfiles from same FW version didn't work too.

Unfortunately, I have exceeded the recovery time and the customer will come today to collect the drive.

Case not solved and I gave up.


Thanks for anyone trying to help.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 32 posts ]  Go to page Previous  1, 2

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 35 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group