The issue is caused by a BIOS setting that needs to be enabled to allow installation of hardware encryption on supported OPAL 2 Self-Encrypting Drives.
To enable the BIOS setting, go to the BIOS of the device (Refer to the device manufacturer documentation for the specific steps). This setting is usually under the Settings tab of the BIOS.
Make sure that Allow OPAL Hard Drive SID Authentication is enabled before saving the settings.
Click image to enlarge
Endpoint EncryptionAll
You cannot install the Full Disk Encryption (FDE) agent on a device using a supported OPAL 2 Self-Encrypting Drive (SED).
From the C:\tmfdeinstall.log, you will see similar lines with the following error code:
0x0100000005 (TCG__NOT_AUTHORIZED)
2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]TCG Drive returns error: ErrorCode=0x0100000005 (TCG__NOT_AUTHORIZED). - [TCGDrive_Console.cpp(1504)] 2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]TCG Drive returns error: ErrorCode=0x0100000005 (TCG__NOT_AUTHORIZED). - [TCGDrive_Console.cpp(1504)] 2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]Error of response with ActivateSP: ErrorCode=0x0100000005 (TCG__NOT_AUTHORIZED). - [TCGDrive_Console.cpp(504)] 2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]Give up to activate LockingSP - [OpalDisk.cpp(411)] 2018 04/11 13:16:45 [1944 : 1050] (00) (D) [][TMFDEInstall.exe]Installation has been quit - [OpalDisk.cpp(251)]
The issue is caused by a BIOS setting that needs to be enabled to allow installation of hardware encryption on supported OPAL 2 Self-Encrypting Drives.
To enable the BIOS setting, go to the BIOS of the device (Refer to the device manufacturer documentation for the specific steps). This setting is usually under the Settings tab of the BIOS.
Make sure that Allow OPAL Hard Drive SID Authentication is enabled before saving the settings.
Click image to enlarge
