The WinReducer Forum
Would you like to react to this message? Create an account in a few clicks or log in to continue.

The WinReducer ForumLog in

FORUM

description[IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled) Empty[IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled)

more_horiz
Apparently, Windows 8.1 setup attempts to automatically enable eDrive. Once its enabled, it disables the ATA Security Mode feature set on SSD drives when various hardware requirements are met..  There is no re-enabling it unless you are one of the lucky few that get a hold of a PSID reset tool from the SSD manufacturer, which will reset the drive to factory.  Without the PSID reset tool you won't be able to secure erase u'r SSD.

I am still researching the options on how to keep a SSD's ATA secuirty mode intact when installing Windows 8.1.  It might be as easy as disabling the encrypted disk provisioning or it might also include the need for disabling the TCG Security Activation too.

DisableEncryptedDiskProvisioning -
 
Specifies whether Windows activates encryption on blank drives that are capable of hardware-based encryption during installation.
By default, Windows activates drives that are capable of hardware-based encryption by using a fixed access control list (ACL) that is based on the Opal Security Subsystem Class (Opal SSC) specification.

TCGSecurityActivationDisabled -

Specifies whether Windows automatically configures encrypted drives (eDrives), also known as encrypted hard disk drives (eHDDs).
TCGSecuirtyActivationDisabled sets the Group Policy administrative template setting: Do not automatically encrypt files moved to encrypted folders. This Group Policy setting is used after Windows is installed and started up. The setting specifies, for unprovisioned eDrives, whether security should be activated on the eDrive during provisioning. Use the DisableEncryptedDiskProvisioning unattend setting for configuring the operating system installation for the target HDD.

Which ever way it is.  It would be great to just check a box or two to get it done using WinReducer 8.1.  This should help a bunch of drives from being crippled just by installing Windows 8.1

description[IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled) EmptyRe: [IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled)

more_horiz
Hello,

I will add these 2 unattended options !

 Very Happy 

description[IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled) EmptyRe: [IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled)

more_horiz
ADDED in v1.11 !

description[IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled) EmptyRe: [IMPLEMENTED] Disable eDrive - (DisableEncryptedDiskProvisioning + TCGSecurityActivationDisabled)

more_horiz
Thanks, wow that was a quick response... Now I can finally take Win 8.1 for a spin...  Really appreciate u'r lightning fast work..  bounce
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum