Lock Opal-compliant hard drives

To lock Opal-compliant hard drives, the machine key has to be defined for at least one volume on the hard drive in an encryption policy. In case the encryption policy includes a boot volume, the machine key is defined automatically.

  1. In the SafeGuard Management Center, create a policy of the type Device Protection.
  2. In the field Media encryption mode, select Volume-based.
  3. In the field Key to be used for encryption, select Defined machine key.
  4. Save your changes in the database.
  5. Deploy the policy to the relevant endpoint.

The Opal-compliant hard drive is locked and can only be accessed by logging on to the computer at the SafeGuard Power-on Authentication.