Skip to content

Commit 52c63b5

Browse files
committed
Note the need to omit separator characters from the PSID
1 parent dded9b3 commit 52c63b5

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

man/common_options.adoc

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -338,7 +338,8 @@ Erase *ALL* data on the OPAL self-encrypted device, regardless of the partition
338338
and does not require a valid LUKS2 header to be present on the device to run. After providing
339339
correct PSID via interactive prompt or via *--key-file* parameter the device is erased.
340340
+
341-
PSID is usually printed on the OPAL device label (either directly or as a QR code).
341+
PSID is usually printed on the OPAL device label (either directly or as a QR code). PSID must be
342+
entered without any dashes, spaces or underscores.
342343
+
343344
*NOTE*: PSID should be treated as sensitive information as it allows anyone with remote access to
344345
the OPAL device to destroy data even if the device is locked. Be sure you do not leak PSID through

man/cryptsetup.8.adoc

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -449,6 +449,9 @@ Securely erase a partition or device. Requires admin password.
449449
Additionally specify *--hw-opal-factory-reset* for a FULL factory reset of the
450450
drive, using the drive's *PSID* (typically printed on the label) instead of the
451451
admin password.
452+
453+
*NOTE*: PSID must be entered without any dashes, spaces or underscores.
454+
452455
*WARNING*: a factory reset will cause ALL data on the device to be lost,
453456
regardless of the partition it is ran on, if any, and regardless of any LUKS2
454457
header backup.

0 commit comments

Comments
 (0)