Unable to unlock SED drives after boot drive died

abhijeet1301

Cadet
Joined
Mar 19, 2023
Messages
2
Hello, this weekend has nothing but a nightmare for me. I am really hoping experts would be able to help me out here. I had a Truenas Scale running on Supermicro 6048R-E1CR72L with 60 * 18TB SED drives that I use for backups and backups only. I followed this guide to encrypt my drives https://www.truenas.com/docs/core/c...vanced > SED,System > Advanced > SED Password. and all was fine for a week or so. Low and behold the boot drive got offline and upon checking we found it would just not show up. We booted a new scale this time and the pool wouldn't import even after using the correct password in advanced field. The support staff panicked and ran below commands in order to clear the key:
sedutil-cli --disableLockingRange 0 password /dev/sda
sedutil-cli --setMBREnable off password /dev/sda

After above commands the drives still wound say locking enabled as Y then they ran
sedutil-cli --eraseLockingRange 0 password /dev/sda

At this point I cannot import the pool nor I can disable the locking of my drives

root@truenas[/]# sedutil-cli --query /dev/sda

/dev/sda SAS WUH721818AL5201 B680 WDC
TPer function (0x0001)
ACKNAK = N, ASYNC = N. BufferManagement = N, comIDManagement = N, Streaming = Y, SYNC = Y
Locking function (0x0002)
Locked = N, LockingEnabled = Y, LockingSupported = Y, MBRDone = N, MBREnabled = N, MBRAbsent = N, MediaEncrypt = Y
Geometry function (0x0003)
Align = Y, Alignment Granularity = 8 (4096), Logical Block size = 512, Lowest Aligned LBA = 0
Enterprise function (0x0100)
Range crossing = N, Base comID = 0x07fe, comIDs = 2
Block SID Authentication function (0x0402)
SID Blocked State = N, SID Value State = Y, Hardware Reset = N

TPer Properties:
MaxPacketSize = 16364 MaxComPacketSize = 16384
MaxResponseComPacketSize = 16384 MaxIndTokenSize = 16328 MaxMethods = 1
MaxPackets = 1 MaxSubpackets = 1 MaxSessions = 1
MaxAuthentications = 0 MaxTransactionLimit = 1 DefSessionTimeout = 0
MinSessionTimeout = 0 MaxSessionTimeout = 0
Host Properties:
MaxPacketSize = 2028 MaxComPacketSize = 2048
MaxResponseComPacketSize = 2048 MaxIndTokenSize = 1992 MaxMethods = 1
MaxPackets = 1 MaxSubpackets = 1
root@truenas[/]# sedutil-cli --revertNoErase password /dev/sdaa
method status code NOT_AUTHORIZED
root@truenas[/]#
root@truenas[/]# sedutil-cli --listLockingRange 0 password /dev/sda
Band[0]:
Session Authenticate failed (response = false)
could not establish session for row[0]

 
Top