4.6.2.5 Encrypting destination and accessory drives
TD4 can encrypt destination and accessory drives using password-based XTS-AES
whole disk encryption. This Tableau-based encryption is compatible with the
Tableau TD2u Forensic Duplicator, TX1 Tableau Forensic Imager, and the open
source VeraCrypt utility. Encryption can only be setup on destination and accessory
drives as it requires a write modification to the drive.
Caution
The encryption process overwrites the destination/accessory drive, so
remember to encrypt the destination drive before using it in a TD4
acquisition job.
To encrypt a drive attached to a TD4 destination or accessory port, select Encrypt
from the Reconfigure option list. Enter the desired encryption password and then
tap the Start button.
Note: TD4 supports auto-capitalization for text entry fields. This means that
the first character in an entry will be capitalized, and subsequent character
entries will be automatically switched to lower case. The exception is password
entry fields. Auto-capitalization is disabled for password entry fields to avoid
confusion and prevent incorrect password entries. It is recommended to
double-check password entries by viewing them in plain text (using the eye
icon at the end of the entry field) before submission.
A Tableau-encrypted destination or accessory drive can be unlocked with the
password to allow browsing or imaging/restoring to the encrypted container.
A Tableau-encrypted source drive can be unlocked with the password to allow
browsing or imaging/restoring of the drive’s unencrypted contents to a destination
drive.
OpenText is not able to recover lost passwords for TD4 encrypted media, so take
appropriate steps to ensure you never lose your password.
To remove encryption from a drive, connect the drive to a TD4 destination or
accessory port and then, without unlocking the encryption, wipe the drive.
Note: If a Tableau encrypted drive is unlocked prior to wiping, the encryption
will remain intact and only the contents of the unlocked encryption container
will be wiped. If clearing the encrypted state is desired, the drive’s encryption
must remain locked prior to initiating a wipe.
4.6. Viewing sources and destinations
ISTD230100-UGD-EN-1
User Guide
49