Problem: 

Use of external SED management is desired, or an orphaned drive which has been managed by EMBASSY Security Center (ESC) drive requires access or un-initialization. 

Applies To: 

ESC version 2.4 or higher, for USB Support ESC Version 2.5 or later is required.

Solution: 

REQUIREMENTS:

Software:    

EMBASSY Security Center (ESC) software version 2.4 or higher installed on host system.

ESC Version 2.5  or later is required for USB Support connection for enclosure.  
Host ESC version must match version used to initialize existing ESC managed drives.

Hardware: 

Supported Drive (see http://wave.com/self-encrypting-drive-compatibility-list)
Supported Enclosure from group specified below:

  • Option 1:  StarTech 2.5" eSATA & USB Drive Enclosure (model - SAT2510U2E or S251SMU33EP)  Note: For eSATA Support the SATA Configuration for the drive must be set to AHCI. USB will support both AHCI as well as ATA.With StarTech’s latest chipset, only eSATA connection is compatible with Wave TDM.  The previous chipset was Q1003JM20316 and the new chipset is Q1205JMB351 (began shipping in mid-2013).  Starting in ESC-TDE 2.10.2, both USB and eSATA connection are compatible with TDM operations.
  • Option 2:  GoFlex USB 3.0 STAE 104 cable , Part # 9ZH9P5-RAA, S/N: NA1922B8
  • Option 3: CMS external drives (CMS 2.0 and CMS 3.0)

Note: Wave only officially supports use of the above enclosures. Other enclosures may work with this procedure, however we can only guarantee functionality with the enclosures listed above.

Administrative Credentials: The Drive Administrator's User name, domain (or computer name) and password are required for access to an orphaned ESC managed drive. 

 

PROCESS:

For a locally managed drive:

  1. Confirm the host drive is in AHCI mode (BIOS drive sata configuration) to ensure drive in enclosure is seen in required AHCI state.

  2. Place the corrupted drive in the enclosure, and plug in its USB power cable, along with either the eSATA cable or USB Data cable into the working client computer.

  3. Power down the client computer and turn it back on. Locate the enclosed drive in the Device Manager.

  4. Using the host EMBASSY Security software, manage the secondary drive in the enclosure by selecting the appropriate drive letter on the Drive Management screen, then initialize and add drive users. To access a managed drive, provide the Administrative credentials created when the drive was initialized.

 

For a drive managed by ERAS:

  1. Place the corrupted drive in the enclosure, and plug in its USB power cable, along with either the eSATA cable or USB Data cable into the working client computer.
  2. Power down the client computer and turn it back on. This is crucial for ERAS to recognize the secondary drive.
  3. Once OS Present, locate the working client computer in ERAS, right click it, and select Refresh.
  4. Right click the target computer again, select Properties and the Trusted Drive Management Tab.
  5. Select the Trusted Drive dropdown and select the secondary drive. The secondary drive is typically listed as \\.\PHYSICALDRIVE1.
  6. Once you have selected the secondary drive, you can then uninitialize the drive, or simply turn off Drive Locking as needed.

Once the secondary drive is uninitialized or has drive locking turned off, you will be able to open view the data on the disk, and perform any data recovery you may need to perform.