Recover TCG Pyrite V1 dataset drives locked with `sedhelper` [SED]

Voxorin

Cadet
Joined
Jan 17, 2024
Messages
3
I was attempting to enable and lock some of my TCG Enterprise drives and in the process I managed to lock all "compatible" drives. That includes both my Pyrite V1 NVMe mirrored drives that contains my System Dataset and Apps.

Here's my approximate order of operations:
  1. Reboot to BIOS
  2. Enable `fTPM` & `Disable Block SID`
  3. Boot TrueNAS
  4. Set global SED password in the GUI
  5. Run `sedhelper setup [password]` in the shell
    • I saw the 2 Pyrite V1 SSDs report `[OK]`
    • I thought "Whoops, I should've specified the drives I wanted, but that's fine I know the password"
  6. Everything is fine (the drives hadn't locked yet)
  7. I restart the system a couple of days later
  8. The system POSTs with an error message `A2` (Issue with the NVMe Drives)
  9. The system won't boot to BIOS with either of the 2 NVMe drives installed
  10. I removed one of the drives and placed it in my Gigabyte/Intel system
  11. I booted up the [sedutil RESCUE64 image](https://github.com/ChubbyAnt/sedutil/releases/tag/1.15-5ad84d8)
  12. I queried the drive `sedutil-cli --query /dev/nvme0`
    • The drive reported `LOCKED = Y` with no MBR shadow partition
  13. Running `linuxpba` failed to unlock them
  14. All other commands with my set password and/or the default MSID report `Authentication Failed`
    • i.e. `sedutil-cli -–disableLockingRange 0 [password/MSID] /dev/nvme0`
Unfortunatly, I haven't manually backed up the system dataset to another location. I do have backup and secret key tarball created during my recent upgrade from V22.12 to V23.

So, my questions are:
  1. Is they're any way to recover these drives?
  2. Is there any way to recover my TruNAS system without the dataset from the drives?
 

Voxorin

Cadet
Joined
Jan 17, 2024
Messages
3
I was able to recover the system with the backup dataset. Unfortunately, the 2 NVMe drives appear to be bricked.
 
Top