Specification Version 2.01 Revision 1

1 TCG TCG Storage Security Subsystem Class: Opal Specification Version Revision August 5, 2015 Contact: PUBLISHED Copyright TCG 2015 TCG Storage Opal SSC TCG Copyright 2015 Specification Version Published Revision Page ii Copyright 2015 Trusted Computing Group, Incorporated. Disclaimers, Notices, and License Terms THIS Specification IS PROVIDED AS IS WITH NO WARRANTIES WHATSOEVER, INCLUDING ANY WARRANTY OF MERCHANTABILITY, NONINFRINGEMENT, FITNESS FOR ANY PARTICULAR PURPOSE, OR ANY WARRANTY OTHERWISE ARISING OUT OF ANY PROPOSAL, Specification OR SAMPLE.

2 Without limitation, TCG disclaims all liability, including liability for infringement of any proprietary rights, relating to use of information in this Specification and to the implementation of this Specification , and TCG disclaims all liability for cost of procurement of substitute goods or services, lost profits, loss of use, loss of data or any incidental, consequential, direct, indirect, or special damages, whether under contract, tort, warranty or otherwise, arising in any way out of use or reliance upon this Specification or any information herein.

3 This document is copyrighted by Trusted Computing Group (TCG), and no license, express or implied, is granted herein other than as follows: You may not copy or reproduce the document or distribute it to others without written permission from TCG, except that you may freely do so for the purposes of (a) examining or implementing TCG specifications or (b) developing, testing, or promoting information technology standards and best practices, so long as you distribute the document with these disclaimers, notices, and license terms.

4 Contact the Trusted Computing Group at for information on Specification licensing through membership agreements. Any marks and brands contained herein are the property of their respective owners. TCG Storage Opal SSC TCG Copyright 2015 Specification Version Published Revision Page iii Change History Version / Revision Date Description Version Rev 27 January 2009 First publication Version Rev 20 April 2009 Changed TCG Storage Architecture Core Specification reference and Opal SSC Specification numbering Version Rev 18 December 2009 Corrected the definition of LockingEnabled bit Clarified Revert when Manufactured-Inactive Version Rev 27 February 2012 Added LBA range

5 Alignment restriction information mechanism Added SecretProtect table as Mandatory in the Locking SP media encryption keys Added Sector Table access granularity reporting mechanism Added support for SEDs with SID values not equal to MSID Added support for Admin authorities in the Admin SP Provided an optional ability to disable the SID authority in the Admin SP Added a programmatic TPer reset mechanism Made Additional DataStore Feature Set mandatory for SEDs compliant with Opal Added a mechanism for disallowing User authorities to change their C_PIN values Allowed modification of CommonName columns in Locking and Authority tables of the Locking SP Made Authenticate method of the Base template mandatory Made Random method of the Crypto template mandatory TCG Storage Opal SSC TCG Copyright 2015 Specification Version Published Revision Page iv Version / Revision Date Description Version Rev 5 August 2015 Fixed Table column values in Table 33 Locking SP.

6 SecretProtect Table Preconfiguration . Updated reference [4] to latest Version Moved SP life cycle and ATA Security Feature Set interactions in Appendix to [4]. Moved list of aborted ATA/SCSI commands from section to [4]. Added PSID Feature Set as mandatory. Removed Interface Control Template. Moved interactions between Activate and ATA Security in section to [4] . TCG Storage Opal SSC TCG Copyright 2015 Specification Version Published Revision Page v TABLE OF CONTENTS 1 INTRODUCTION.

7 1 DOCUMENT PURPOSE .. 1 SCOPE AND INTENDED AUDIENCE .. 1 KEY WORDS .. 1 DOCUMENT REFERENCES .. 1 DOCUMENT PRECEDENCE .. 1 SSC TERMINOLOGY .. 2 LEGEND .. 2 2 OPAL SSC OVERVIEW .. 4 OPAL SSC USE CASES AND THREATS .. 4 SECURITY PROVIDERS (SPS) .. 4 INTERFACE COMMUNICATION PROTOCOL .. 4 CRYPTOGRAPHIC FEATURES .. 4 AUTHENTICATION .. 4 TABLE MANAGEMENT .. 5 ACCESS CONTROL & PERSONALIZATION .. 5 ISSUANCE .. 5 SSC DISCOVERY .. 5 MANDATORY FEATURE SETS .. 5 3 OPAL SSC FEATURES.

8 6 SECURITY PROTOCOL 1 SUPPORT .. 6 Level 0 Discovery (M) .. 6 Level 0 Discovery Header .. 6 TPer Feature (Feature Code = 0x0001) .. 7 Locking Feature (Feature Code = 0x0002) .. 7 LockingEnabled Definition .. 8 Geometry Reporting Feature (Feature Code = 0x0003) .. 8 Overview .. 8 Align .. 9 LogicalBlockSize .. 9 9 LowestAlignedLBA .. 9 Opal SSC Feature (Feature Code = 0x0203) .. 9 SECURITY PROTOCOL 2 SUPPORT .. 10 ComID Management .. 10 Stack Protocol Reset (M) .. 10 TPER_RESET command (M).

9 10 COMMUNICATIONS .. 11 Communication Properties .. 11 Supported Security Protocols .. 11 ComIDs .. 11 Synchronous Protocol .. 12 Payload Encoding .. 12 Stream Encoding Modifications .. 12 TCG Packets .. 13 Payload Error Response .. 13 Storage Device Resets .. 13 Interface Resets .. 13 TCG Reset Events .. 13 Protocol Stack Reset Commands (M) .. 14 TCG Storage Opal SSC TCG Copyright 2015 Specification Version Published Revision Page vi 4 OPAL SSC-COMPLIANT FUNCTIONS AND SPS.

10 15 SESSION MANAGER .. 15 Methods .. 15 Properties (M) .. 15 StartSession (M) .. 16 SyncSession (M) .. 16 CloseSession (O) .. 16 ADMIN SP .. 16 Base Template Tables .. 16 SPInfo (M) .. 16 SPTemplates (M) .. 16 Table (M) .. 17 MethodID (M) .. 18 AccessControl (M) .. 18 ACE (M) .. 24 Authority (M) .. 25 C_PIN (M) .. 26 Base Template Methods .. 26 Admin Template Tables .. 27 TPerInfo (M) .. 27 Template (M) .. 27 SP (M) .. 27 Admin Template Methods .. 28 Crypto Template Tables.