You are not logged in.

#1 2026-02-22 17:35:24

SneakyLittleman
Member
Registered: 2022-03-08
Posts: 37

[SOLVED] FDE Opal - Cryptsetup erase not working

Hey there, I'm reinstalling arch on a different ssd in my Proart P16 and would like to take advantage of my Micron 2400's support for full encryption. The specs of the drive read: with TCG Opal 2.01 and Pyrite 2.01 support.

When booting arch's usb installation medium, I'm unable to secure erase the disk, which seems to be a prerequisite:

cryptsetup erase -v --hw-opal-factory-reset /dev/nvme0n1

yields an error:

device /dev/nvme0n1 or kernel does not support OPAL encryption.
command failed with code 1 (wrong or missing parameters)

The kernel does support opal (checked with zgrep CONFIG_BLK_SED_OPAL) and I GUESS I typed the PSID correctly:
32 characters / no hyphens / double-checked with Gemini who read the PSID same as me...Tried 3 times.

Any clue??

EDIT: Forgot to mention that in the UEFI I can set a master HDD password and a user HDD password (don't know it this is related and don't know what it does) - no password is set currently.

EDIT2 - SOLUTION: RTFM... There are two variants of the SSD and mine doesn't support OPAL encryption. Check the antepenultimate number/letter of your drive's specs (before AB): A = non-SED TCG Pyrite. 5 = SED TCG Opal.

Over and out.

Last edited by SneakyLittleman (2026-02-23 10:50:00)

Offline

Board footer

Powered by FluxBB