4.6.2.6 Formatting destination and accessory drives
To perform an image duplication to or save logs to a drive, you must format the
destination or accessory drive with a filesystem that is recognizable by TD4. TD4
supports formatting destination and accessory drives in the following filesystem
formats: exFAT, NTSF, FAT, HFS+, or EXT4.
Note: TD4 cannot format a drive with an APFS nor write to a drive with a pre-
existing APFS. It will mount APFS formatted volumes as read-only on all TD4
ports (source, destination, and accessory). Such filesystems are not usable for
any activities that require writing, even on destination and accessory ports.
exFAT is recommended for best compatibility when accessing drives with all
modern operating systems. EXT4 is recommended for use with Linux forensic tools.
HFS+ is recommended for use with MacOS forensic tools.
Note: When FAT is selected as the filesystem type for a destination drive
format, TD4 will format the drive as FAT32. However, job logs (including the
format log) and all user interface elements will simply show this as FAT. That
is because TD4 supports reading from all FAT formats (12, 16, and 32) and
simply identifying them all as FAT is considered acceptable and accurate for
filesystem identification purposes.
To format a destination or accessory drive, attach the drive to the desired TD4 port
and then tap on the associated drive tile on the TD4 home screen. Tap the
Reconfigure button in the Contents section of the drive details screen and then
select the Format option. Select the desired filesystem type and then tap the Start
button.
Note: OpenText strongly recommends not using FAT as a destination or
accessory drive filesystem. On TD4, FAT filesystems are limited to a maximum
output file size of 2GB and reading from or writing to them is known to be
slower than other filesystem types. Also, FAT does not support drives over
2TB.
4.6.3 Opal encryption
Opal encryption is a hardware-based encryption method that is managed by the
controller on the drive with only minimal host system interaction. Opal is an
industry standard created by the Trusted Computing Group (TCG) consortium that
defines, among other things, the interface protocol to these types of hardware
encrypted drives. These are commonly referred to as self-encrypting drives (SEDs)
as the host system does little more than provide a front-end interface to manage the
encryption. The control system on the drive is responsible for encrypting/
unencrypting all stored data on the drive and controlling access to it.
TD4 can detect Opal SEDs that have had their encryption enabled and will warn of
the presence of Opal encryption in various places in the user interface and forensic
logs. A detected locked Opal drive will have a red lock icon (with the lock closed) on
Chapter 4 Using TD4
50
OpenText™ Tableau™ Forensic TD4 Duplicator
ISTD230100-UGD-EN-1
To Next Page
Loading...