undefined | Better HN

0 pointsrdl12y ago0 comments

Yeah, it is standard Opal, but I just use FileVault 2. I find AES-NI supported FileVault performance to be more than adequate. I don't know of anything but Wave which does Opal key management for OSX, particularly for boot drives.

I use Fusion Drive with the 1TB drive I already had, too, so SED on just one of those drives wouldn't help.

0 comments

jlgaddis12y ago

A very similar situation here, although I'm running Linux on this machine and not OS X. I feel that the SED stuff (while technically true) is misleading -- I specifically chose this drive over cheaper and better drives because of this feature. Lesson learned, though.

The only thing I could ever find for Linux that supported Opal was "SecureDoc for Linux" which, apparently, is impossible to get ahold of unless you're an enterprise with a fat bank account. Fortunately, like with FileVault, dm-crypt (which also leverages AES-NI) is more than sufficient for my needs.

Thanks for the reply.

rdlOP12y ago

It shouldn't be too hard to do a SED control utility fundamentally. It is maybe a licensing or TCG membership issue though. I thought it was just some extra drive commands.

j / k navigate · click thread line to collapse