NetApp NSE (NetApp Self Encrypted) SAS Drives - help?

cyberresearch · May 5, 2023

I have 20 SAS drives but cannot use them in my home lab. They are formtaed I followed 'https://forums.servethehome.com/index.php?threads/how-to-reformat-hdd-ssd-to-512b-sector-size.4968/' and 'How to reformat 520 byte drives to 512 bytes (usually)' because they are in 520b format. I could not reformat to 512 because there is an error. I thought it was a SED drive but sedutil-cli says it is invalid.

I tried the stuff from the post 'Netapp SSD 520 -> 512 fail. Possible firmware issue? (Solved)' which led to 'Home' which was promising but still failed.

seatools, ultimatebootcd, parted magic - non worked

I searched for my drive part number X417A-R6 which lead to a sale posting for the drives but it has the title 'NetApp X417A-R6 nse self encrypting 900gb 10000 rpm 25inch sas 6gbps hard drive for fas2240-2 storageshelf ds2246'...SO these drives all appear to be NetApp NSE (NetApp Self Encrypted) SAS Drives.

This lead me to 'storage encryption disk revert-to-original-state' but now I am to a point that I cannot obtain the Ontap software to revert the drives to the original state.

I found a 'Netapp DS2246 Storage Expansion Array' on ebay thinking I could try to use it or at least revert the drives.

Anyone get to this point? Am I SOL? Is there any resources for reverting the NSE with out NetApp Ontap software? Opensource?

I may have missed trying something so any suggestions are appreciated.

Basic specs:
Dell R710
Dell H310 in IT mode
openSUSE Leaf installed on a non NSE/SED drive - it has sg-utils and sedutil-cli already installed or part of its current repos

Thanks,
"A guy who wants to use the hardware he bought for cheap"

Some command outputs:

Code:

# sg_scan -i
/dev/sg0: scsi0 channel=0 id=0 lun=0
    ATA       INTEL SSDSC2BB12  DL2D [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg1: scsi0 channel=0 id=1 lun=0
    NETAPP    X417_HCBFE900A10  NA02 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg2: scsi0 channel=0 id=2 lun=0
    NETAPP    X417_HCBFE900A10  NA02 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg3: scsi0 channel=0 id=3 lun=0
    NETAPP    X417_HCBFE900A10  NA02 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg4: scsi0 channel=0 id=4 lun=0
    NETAPP    X417_HCBFE900A10  NA02 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg5: scsi0 channel=0 id=5 lun=0
    NETAPP    X417_HCBFE900A10  NA02 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg6: scsi0 channel=0 id=6 lun=0
    NETAPP    X417_HCBFE900A10  NA02 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg7: scsi0 channel=0 id=7 lun=0
    NETAPP    X417_HCBFE900A10  NA02 [rmb=0 cmdq=1 pqual=0 pdev=0x0]
/dev/sg8: scsi1 channel=0 id=0 lun=0 [em]
    TEAC      DVD-ROM DV-28SW   R.2A [rmb=1 cmdq=0 pqual=0 pdev=0x5]

Code:

# smartctl --all /dev/sg1
smartctl 7.2 2021-09-14 r5237 [x86_64-linux-5.14.21-150400.24.60-default] (SUSE RPM)
Copyright (C) 2002-20, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Vendor:               NETAPP
Product:              X417_HCBFE900A10
Revision:             NA02
Compliance:           SPC-4
User Capacity:        914,250,879,360 bytes [914 GB]
Logical block size:   520 bytes
Physical block size:  4160 bytes
LU is fully provisioned
Rotation Rate:        10520 rpm
Form Factor:          2.5 inches
Logical Unit id:      0x5000cca02e167ddc
Serial number:        04GDBG6A
Device type:          disk
Transport protocol:   SAS (SPL-3)
Local Time is:        Fri May  5 20:59:20 2023 CDT
SMART support is:     Available - device has SMART capability.
SMART support is:     Enabled
Temperature Warning:  Enabled

=== START OF READ SMART DATA SECTION ===
SMART Health Status: OK

Current Drive Temperature:     28 C
Drive Trip Temperature:        85 C

Accumulated power on time, hours:minutes 42:51
Manufactured in week 21 of year 2018
Specified cycle count over device lifetime:  50000
Accumulated start-stop cycles:  27
Specified load-unload count over device lifetime:  600000
Accumulated load-unload cycles:  28
Elements in grown defect list: 0

Error counter log:
           Errors Corrected by           Total   Correction     Gigabytes    Total
               ECC          rereads/    errors   algorithm      processed    uncorrected
           fast | delayed   rewrites  corrected  invocations   [10^9 bytes]  errors
read:          0        0        19         0       3647         67.835           0
write:         0        0         0         0       1841       1875.030           0
verify:        0        0         0         0        784          5.047           0

Non-medium error count:      160

SMART Self-test log
Num  Test              Status                 segment  LifeTime  LBA_first_err [SK ASC ASQ]
     Description                              number   (hours)
# 1  Background long   Aborted (by user command)   -      41                 - [-   -    -]

Long (extended) Self-test duration: 6004 seconds [100.1 minutes]

Code:

# hdparm -C /dev/sg1

/dev/sg1:
SG_IO: bad/missing sense data, sb[]:  70 00 05 00 00 00 00 18 00 00 00 00 20 00 21 c0 00 00 00 00 f8 21 00 00 00 00 00 00 00 00 00 00
SG_IO: bad/missing sense data, sb[]:  70 00 05 00 00 00 00 18 00 00 00 00 20 00 21 c0 00 00 00 00 f8 21 00 00 00 00 00 00 00 00 00 00
 drive state is:  unknown
 
# sg_decode_sense 70 00 05 00 00 00 00 18 00 00 00 00 20 00 21 c0 00 00 00 00 f8 21 00 00 00 00 00 00 00 00 00 00
Fixed format, current; Sense key: Illegal Request
Additional sense: Invalid command operation code
  Field replaceable unit code: 33
  Sense Key Specific: Error in Command: byte 0

After compiling the setblocksize tool:

Code:

# time ./setblocksize -b512 -t1200 /dev/sg2

setblocksize V0.2

Checking parameters ...
   Blocksize specified.
   Timeout specified.
   Done.
New blocksize: 512 Bytes
Format timeout: 1200 minutes
Open device file ...
   Done.
Prepare command ...
   Done.
Send INQUIRY command ...
   Done.
Check status ...
   Command successful.
Check for LUN ...
   LUN present.

===============================================================================
SCSI ID     : 2
LUN         : 0
Connected to: Host0 / Channel0
Manufacturer: NETAPP
Model       : X417_HCBFE900A10
Device type : Disk
===============================================================================
Do you really want to reformat this device [y/n]? y

Prepare command ...
   Done.
Send MODE SELECT command ...
   Done.
Check status ...
   Command successful.
Prepare command ...
   Done.
Send FORMAT UNIT command ...
   *** Please wait - Do not manually interrupt or power down! ***
   Done.
Check status ...
   Error: Check Condition
[valid=0] Info fld=0x0, Current sense key: Data Protect
Raw sense data (in hex):
  70 00 07 00 00 00 00 18 00 00 00 00 20 02 27 00
   plus...: Driver_status=0x08 (DRIVER_SENSE,SUGGEST_OK)
   Command NOT succesful!


real    0m4.419s
user    0m0.002s
sys     0m0.000s

Code:

# sg_decode_sense 70 00 07 00 00 00 00 18 00 00 00 00 20 02 27 00
Fixed format, current; Sense key: Data Protect
Additional sense: Access denied - no access rights
  Field replaceable unit code: 39

Code:

# sg_format --format -v --size=512 -S /dev/sg1
    NETAPP    X417_HCBFE900A10  NA02   peripheral_type: disk [0x0]
      PROTECT=1
      << supports protection information>>
      Unit serial number: 04GDBG6A
      LU name: 5000cca02e167ddc
    mode sense(10) cdb: [5a 00 01 00 00 00 00 00 fc 00]
Mode Sense (block descriptor) data, prior to changes:
  Number of blocks=1758174768 [0x68cb9e30]
  Block size=520 [0x208]
    mode select(10) cdb: [55 11 00 00 00 00 00 00 1c 00]

A FORMAT UNIT will commence in 15 seconds
    ALL data on /dev/sg1 will be DESTROYED
        Press control-C to abort

A FORMAT UNIT will commence in 10 seconds
    ALL data on /dev/sg1 will be DESTROYED
        Press control-C to abort

A FORMAT UNIT will commence in 5 seconds
    ALL data on /dev/sg1 will be DESTROYED
        Press control-C to abort
    Format unit cdb: [04 18 00 00 00 00]
Format unit:
Fixed format, current; Sense key: Data Protect
Additional sense: Access denied - no access rights
  Field replaceable unit code: 39
Format unit command: Data protect, type: sense key; write protected media?
FORMAT UNIT failed

cyberresearch · May 5, 2023

Another output:

Code:

# sedutil-cli --scan
Scanning for Opal compliant disks
/dev/sda   No  INTEL SSDSC2BB120G6R                     G201DL2D
/dev/sdb   No
/dev/sdc   No
/dev/sdd   No
/dev/sde   No
/dev/sdf   No
/dev/sdg   No
/dev/sdh   No
No more disks present ending scan

WanWizard · May 8, 2023

Does this give you any pointers: Seagate SAS - SED (Self Encrypting Drive) - Unlock ?

isujosh · Sep 15, 2023

cyberresearch said:
I have 20 SAS drives but cannot use them in my home lab. They are formtaed I followed 'https://forums.servethehome.com/index.php?threads/how-to-reformat-hdd-ssd-to-512b-sector-size.4968/' and 'How to reformat 520 byte drives to 512 bytes (usually)' because they are in 520b format. I could not reformat to 512 because there is an error. I thought it was a SED drive but sedutil-cli says it is invalid.

I tried the stuff from the post 'Netapp SSD 520 -> 512 fail. Possible firmware issue? (Solved)' which led to 'Home' which was promising but still failed.

seatools, ultimatebootcd, parted magic - non worked

I searched for my drive part number X417A-R6 which lead to a sale posting for the drives but it has the title 'NetApp X417A-R6 nse self encrypting 900gb 10000 rpm 25inch sas 6gbps hard drive for fas2240-2 storageshelf ds2246'...SO these drives all appear to be NetApp NSE (NetApp Self Encrypted) SAS Drives.

This lead me to 'storage encryption disk revert-to-original-state' but now I am to a point that I cannot obtain the Ontap software to revert the drives to the original state.

I found a 'Netapp DS2246 Storage Expansion Array' on ebay thinking I could try to use it or at least revert the drives.

Anyone get to this point? Am I SOL? Is there any resources for reverting the NSE with out NetApp Ontap software? Opensource?

I may have missed trying something so any suggestions are appreciated.

Basic specs:
Dell R710
Dell H310 in IT mode
openSUSE Leaf installed on a non NSE/SED drive - it has sg-utils and sedutil-cli already installed or part of its current repos

Thanks,
"A guy who wants to use the hardware he bought for cheap"

I am in exactly the same position as you - although I have some extra elements. I bought some X417A-R6 drives which are NetApp NSE - but I also have a NetApp FAS2240 dual controller and DS2246 disk shelf that I added the drives too. It just shows them as 'Failed' and alerts about disk encryption not being supported.

Were you able to re-use the drives at all? Did you have any success at all??

its0x11 · Nov 9, 2023

So I have the exact same drives, and 20 of them coincidentally, that I bought on ebay. Did you ever figure out what to do? I might have gotten just a bit farther in the research, it doesn't seem like these are SED drives, but NSE FIPS drives so might be a little bit different, but I haven't found any way to get around the write protection on them.

isujosh · Nov 12, 2023

its0x11 said:
So I have the exact same drives, and 20 of them coincidentally, that I bought on ebay. Did you ever figure out what to do? I might have gotten just a bit farther in the research, it doesn't seem like these are SED drives, but NSE FIPS drives so might be a little bit different, but I haven't found any way to get around the write protection on them.

Yes, I got them all working. First issue was removing the protection using the Seatools utility and entering the PSID which is printed on the front of the drive. Then changed the the sector size from 520 bytes to 512 bytes and finally reformatted all the drives. They then all showed up properly and I could use them in TrueNas

its0x11 · Nov 12, 2023

isujosh said:
Yes, I got them all working. First issue was removing the protection using the Seatools utility and entering the PSID which is printed on the front of the drive. Then changed the the sector size from 520 bytes to 512 bytes and finally reformatted all the drives. They then all showed up properly and I could use them in TrueNas

Seatools is a Windows tool right? I didn't try that yet because I have no enclosure to connect the SAS drives to a Windows box. Did your drives end up being in FIPS mode?

Do you have a link to a tutorial on the seatools?

mr44er · Nov 12, 2023

HDD Firmware Downloads. PC-3000 Support Downloads. Data recovery and HDD repair tools

Hard disk recovery software, HDD firmware updates, various tools downloads. Powered by HDD Guru Community.

files.hddguru.com

NA05 there

Instead of 512 bytes, you should use 4096. That is the correct physical block size for this drive.

First you need to unlock the encryption state, but with that I have no experience how to do that.

isujosh · Nov 12, 2023

its0x11 said:
Seatools is a Windows tool right? I didn't try that yet because I have no enclosure to connect the SAS drives to a Windows box. Did your drives end up being in FIPS mode?

Do you have a link to a tutorial on the seatools?

Seatools can be run under Windows or Linux - or as a bootable USB drive.

Seatools

You're going to have to connect the drives to either a Windows or Linux machine to run this obviously. What SAS card are you using?

Just scan the drives under the utility, select the drive, choose the 'Advanced' options, and there will be another option for erasing the PSID which is printed on the front of the drive.

I partly used this information to achieve a clean wipe of the 20 drives I had.

NetApp SED

its0x11 · Nov 12, 2023

Yeah, I have 3 servers setup, 2 with PERC H710P and 1 with PERC H330 mini. All flashed to IT mode firmware. I've just tried many many ways to get the drives reformatted. If seatools worked though, I'm about to boot it up and give it a shot.

Search

NetApp NSE (NetApp Self Encrypted) SAS Drives - help?

cyberresearch

New Member

cyberresearch

New Member

WanWizard

New Member

isujosh

New Member

its0x11

New Member

isujosh

New Member

its0x11

New Member

mr44er

Active Member

HDD Firmware Downloads. PC-3000 Support Downloads. Data recovery and HDD repair tools

isujosh

New Member

its0x11

New Member