Security Protocol In Command
216 T10000: Interface Reference Manual August 2016
SPIN Implementation Notes
The following table lists the possible key-associated data (KAD) parameters reported
in the Next Block Encryption Status page.
• If the SECURITY PROTOCOL or the SECURITY PROTOCOL SPECIFIC field is set
to a reserved or unsupported value, the device server shall terminate the
command with CHECK CONDITION status, with the sense key set to ILLEGAL
REQUEST, and the additional sense code set to INVALID FIELD IN CDB.
• If the SPIN command is sent to an older drive firmware that does not support the
SPIN/SPOUT commands, the drive shall terminate the command with CHECK
CONDITION status, with the sense key set to ILLEGAL REQUEST, and the
additional sense code set to INVALID COMMAND OPERATION CODE.
• If the SPIN command is sent to a drive that has not been configured for DPKM
support, the drive shall terminate the command with CHECK CONDITION
status, with the sense key set to ILLEGAL REQUEST, and the additional sense
code set to INVALID FIELD IN CDB such as the Security Protocol field).
• If the Spin command requesting Next Block Encryption Status is sent to a drive
that does not have a volume mounted, the drive shall terminate the command
with CHECK CONDITION status, with the sense key set to NOT READY, and the
additional sense code set to MEDIUM NOT PRESENT.
TABLE 3-165 Key-Associated Data Reported Parameters (SPIN)
Record
Information
Decryption
Mode Read Data
Encryption
Status
Key-Associated Descriptors
Notes
U-KAD
00h
A-KAD
01h
Nonce
02h
Metadata
03h
Unknown Any ? 1h n/a n/a n/a n/a
Filemark Any n/a 2h n/a n/a n/a n/a
EOD Any n/a 2h n/a n/a n/a n/a
Error Any n/a 1h n/a n/a n/a n/a
Unencrypted Disable Cleartext 3h n/a n/a n/a n/a
Unencrypted Raw Not
Supported
Unencrypted Decrypt Error 3h n/a n/a n/a n/a Unreadable
Unencrypted Mixed Cleartext 3h n/a n/a n/a n/a
Encrypted Disable Error 5 or 6 Y N N N Unreadable
Encrypted Raw Not
Supported
Encrypted Decrypt Decrypte
d
5or6 Y N N N
Encrypted Mixed Decrypte
d
5or6 Y N N N