sedcli and libsed overview
TCG Opal is an industry standard allowing Self-Encrypting Drives management, i.e. enable locking, configuring users, locking ranges etc.
Sedcli is an utility for managing NVMe SEDs that are TCG Opal complaint.
Libsed is a library allowing to programatically manage NVMe SEDs that are TCG Opal complaint.
Getting started
In order to get started use following steps (<sedcli> denotes top level directory for sedcli):
# download sedcli sources
git clone https://github.com/sedcli/sedcli.git
# navigate to source directory
cd <sedcli>/src
# perform build environment configuration and run compilation
./configure
make
make install
# invoke sedcli help to available commands and its syntax
sedcli -H
# alterntively read sedcli man page
man sedcli
For more information goto doc directory.
Features
- Interactive management of NVMe SED allowing to: configure locking, change lock state, revert disk back to manafactured state
- Coming soon: auto management with disk key being retrieved from network attached Key Management Server that is OASIS KMIP complaint
Talks and papers
- SNIA SDC 2019: Data at Rest Protection at Scale with NVMe and Opal
Contributing
We encourage contributions! Patches are accepted via pull request:
- Contributions into sedcli are accepted on GPL-2.0-or-later license
- Contributions into libsed are accepted on LGPL-2.1-or-later license
- Patches must be signedoff by the developer. This indicates that submitter agrees to the Developer Certificate of Origin DCO
Maintainers
- Andrzej Jakowski [email protected]; github @AndrzejJakowski
- Revanth Rajashekar [email protected]; github @RevanthRajashekar
Feel free to contact us anytime with questions, feedback or suggestions. We would love to hear how you see sedcli going forward.