Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Unable to install Full Disk Encryption (FDE) on a Self-Encrypting Drive

    • Updated:
    • 15 May 2018
    • Product/Version:
    • Endpoint Encryption 5.0
    • Endpoint Encryption 6.0
    • Platform:
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 7 32-Bit
    • Windows 7 64-Bit
    • Windows 8 32-Bit
    • Windows 8 64-Bit
    • Windows 8.1 32-Bit
    • Windows 8.1 64-Bit
    • Windows Embedded POSReady 7 (32-bit/64-bit)
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows Vista SP1 32-bit / 64-bit
Summary

You cannot install the Full Disk Encryption (FDE) agent on a device using a supported OPAL 2 Self-Encrypting Drive (SED).

From the C:\tmfdeinstall.log, you will see similar lines with the following error code:

0x0100000005 (TCG__NOT_AUTHORIZED)

2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]TCG Drive returns error:  ErrorCode=0x0100000005 (TCG__NOT_AUTHORIZED). - [TCGDrive_Console.cpp(1504)]    2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]TCG Drive returns error:  ErrorCode=0x0100000005 (TCG__NOT_AUTHORIZED). - [TCGDrive_Console.cpp(1504)]    2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]Error of response with ActivateSP:  ErrorCode=0x0100000005 (TCG__NOT_AUTHORIZED). - [TCGDrive_Console.cpp(504)]    2018 04/11 13:16:45 [1944 : 1050] (00) (F) [][TMFDEInstall.exe]Give up to activate LockingSP -  [OpalDisk.cpp(411)]    2018 04/11 13:16:45 [1944 : 1050] (00) (D) [][TMFDEInstall.exe]Installation has been quit -  [OpalDisk.cpp(251)]  
Details
Public

The issue is caused by a BIOS setting that needs to be enabled to allow installation of hardware encryption on supported OPAL 2 Self-Encrypting Drives.

To enable the BIOS setting, go to the BIOS of the device (Refer to the device manufacturer documentation for the specific steps). This setting is usually under the Settings tab of the BIOS.

Make sure that Allow OPAL Hard Drive SID Authentication is enabled before saving the settings.

BIOS setting

Click image to enlarge

Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1119872
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.