Opal v2 and above drives are required to support multiple locking ranges, so it's possible to block access entirely to the majority of the drive and only have the bootloader w/ PBA support section visible and read-only on such drives.

What security trade-offs are there to setting up a read only bootloader w/ PBA + locked OS, versus Shadow MBR + locked full drive?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.