WD5000LMVW-11VEDS0 Encrypted

protech

Member
Hi Guys,

A WD5000LMVW-11VEDS0, came with head 1 not reading at all giving ABRT error on DDI so i switched the PCB to SATA then I went ahead and imaged head 0. Then i replaced the HSA and continued to image Head 1. Now that i have a full image of the drive on my server, i connected the patient itself to PC3000, said SED locked, I disabled self encryption in EDIT HDD ID and it Ids full now. But when i go to DE i can't seem to be able to find any file system. Almost sectors are full of data. Just what in the world do i do with this encryption. I'm out of ideas....
 
When you already have the full image, what do you need the Patient Drive for again..?? Why not get data out of the image you have.. Or you should rephrase your questions.
 

LarrySabo

Member
Why not connect the clone to the patient's PCB and read the data unencrypted? Set the clone's Max LBA to match that of the patient first and transfer the clone's U12 to the patient's PCB. (Hope I got that right.)
 

Jared

Administrator
Staff member
I think what I would do is connect the patient drive, than select the decryption option in DE. Let it find the key and then save it to a file. Then just switch out the drive for the one you already imaged the data to and use the saved key to decrypt it.
 

protech

Member
The image is on a 3.5" HDD and with out the encryption key I can't get jack out of it. I just had to have it to be on the safe side. I guess I'll try to save the key to file like u said and try to use it to decrypt the image if I can.

Thanks a lot guys...will get back with the result
 

Jared

Administrator
Staff member
A lot of Passport models (not sure of this one) store a copy of the encryption key in a sector near the very end of the drive. So it might be able to find the key on the image if you cloned the whole drive. I'm not sure but you may have to set the LBA of the destination to be the same as the source so it looks in the right place for the key.
 

LarrySabo

Member
It's also in mod 25 or mod 38 depending on the encryption IC used (or for Oxford chips, in the chip on the PCB), so I've heard.
 

protech

Member
This is the reading I get after i load the encryption key...Anybody wanna have a crack at it on TV, that would be great :?

Techno mode key
Techno mode key......................... : Ok

RAM:
HDD Info reading........................ : Ok
Heads number............................ : 2
Cyl Count............................... : 256

Zone allocation table................... : Ok
SA SPT.................................. : 1480

ROM:
ROM reading............................. : Ok
ROM Data size........................... : 256 Kb
Flash ROM dir reading................... : Ok (Active)
Flash ROM dir reading (Ext)............. : Ok
Modules directory address............... : 83 247
SA regions address...................... : by default
SA Translator loading................... : Ok

ROM Modules:
ROM version............................. : 05.1GK
ROM F/W version......................... : 0005001G
Overlay F/W version..................... : 05.1HK
Servo F/W version....................... : N0.11

Heads configuration..................... : by map
Heads number............................ : 2
Heads number in use..................... : 2
Switched off heads...................... : No
Heads map............................... : 0,1

Service area:
Permanent overlay....................... : Loaded
SA dir reading (ID)..................... : Ok
SA Access............................... : Copy 0,Copy 1

Configuration reading................... : Ok
Master Password......................... : has not been set
User Password........................... : has not been set

UA key reading:976 703 520.............. : Ok
Key check............................... : No key
SA key reading:Copy 0................... : Ok
Key check............................... : Ok
Encryption.............................. : INIC3608
SA key reading:Copy 1................... : Ok

UA key reading:976 704 899.............. : Ok
Key check............................... : No key
SA key reading:Copy 0................... : Ok
Key check............................... : No key
SA key reading:Copy 1................... : Ok
Key check............................... : No key

UA key reading:976 703 496.............. : Ok
Key check............................... : No key
SA key reading:Copy 0................... : Has been already read
Key check............................... : No key
SA key reading:Copy 1................... : Has been already read
Key check............................... : No key

UA key reading:976 707 593.............. : Ok
Key check............................... : No key
 

protech

Member
Some details
 

Attachments

  • First 63 LBA image drive.jpg
    First 63 LBA image drive.jpg
    332.5 KB · Views: 2,550
  • First 63 LBA Patient.jpg
    First 63 LBA Patient.jpg
    335.5 KB · Views: 2,549
  • First partition at 2048 image drive.jpg
    First partition at 2048 image drive.jpg
    321.4 KB · Views: 2,549
  • First partition at 2048 Patient.jpg
    First partition at 2048 Patient.jpg
    322.2 KB · Views: 2,549
  • log file.jpg
    log file.jpg
    240.2 KB · Views: 2,550
Top