Problem: 

The Trusted Drive tab is not available in the EMBASSY Security Center to manage the self-encrypting drive.

Applies To: 

Dell ControlPoint (DCP) Security Manager Versions 1.X installed on:
 

Latitude 13, E4200, E4300, E5400, E5410, E5500, E5510, E6400 (ATG, XFR), E6410 (ATG), E6500, E6510, XT2 and XT2_XFR, Z600
OptiPlex 380, 580, 760, 780, 960, 980, XE
Precision Mobile M2400, M4400, M4500, M6400, M6500
Precision WorkStation T3500, T5500, T7500

Solution: 

 

After installation of the software, if the Trusted Drive tab is not available in EMBASSY Security Center, some or all of the following actions can be taken:  Check the SATA configuration of the drive, confirm the self-encrypting drive (SED) is compatible with Wave Software using the SED detection tool, and verify the Trusted Drive service is running.

 

1.  Check the drive configuration The drive must be in AHCI mode for the software to recognize the drive. If the drive does not have AHCI sata mode, ATA can be used but not recommended.

To confirm the correct BIOS SATA Operation:

  • Reboot the machine and press F2 to access the BIOS
  • Navigate to System Configuration > SATA Operation
  • Click the radio button for AHCI/ATA or RAID Autodetect/AHCI or ATA
  • Click Apply and Exit

RAID or IRRT mode is not supported for self-encrypting drives. AHCI mode provides best performance for the drive over ATA.Windows XP does not natively support AHCI mode and requires custom installation of the AHCI driver during OS installation if AHCI mode is desired.In the event of a blue screen after switching to AHCI or ATA mode, you will need to format your OS in AHCI or ATA mode to allow for the drive management functionality with EMBASSY Security Center > Trusted Drive Manager.

If data backup is required; before reformatting, switch the SATA Operation back to IRRT to allow the OS to boot.

 

2.  Confirm you have a compatible self-encrypting drive (SED) Use aSED Detection tool available at: ftp2.wavesys.com

SEDDetector considers only TDM 4.0 and above when checking if a drive is Wave-Managed (Applies to all DDPA versions and DCP version 1.4.0 and above).

Use the following credentials for FTP Site access:
Username: supportdl, Password: support@1

This tool does not require any other Wave software installed to check the drive compatibility.

  • Run the Tool to determine drive manageability:
  • Navigate to the SED Detector 5.1 folder
  • Open the zipped SEDDetector 5.1.zip file which contains both a 32 and 64 bit version of this tool. Review the readme, and copy the correct bit version for your platform to your desktop.
  • To run, open a command prompt (For Windows 7, right click and open CMD with administrative rights), navigate to tool and use the following commands to run the SEDDetector:

SEDdetector.exe CheckSED This determines if a Wave software manageable SED exists. Positive results will return 1, Negative results return 0.

SEDdetector.exe CheckInit This determines if an SED drive has been initialized with Wave Software. Positive results will return 1 if specified drive/drive(s) is an initialized SED, Negative results return 0.

SEDdetector.exe CheckLocking This determines if an SED drive has been initialized with Wave Software and has security enabled.Positive results will return 1 if specified drive/drive(s) is an initialized and secured SED, Negative results return 0.

 

3. Confirm the TDM service is running. The service should be set to start automatically and be currently in a started state.

View TdmService:

  • Vista/Windows7: Select Start > Control Panel > Administrative Tools > Services.
  • Windows XP: Select Start > Control Panel > double-click Administrative Tools > double-click Services.

Locate TdmService, and confirm the Startup Type is set to Automatic. If not set; right click the service, select Properties and modify the Startup type.

If the service is not started; under Extended view, click Start the service.

Open the EMBASSY Security Center and confirm the Trusted Drive tab is available.

 

If the information provided above did not resolve your issue, or you have any additional questions please complete our Support Request Form