Does anyone know how Secure the 'OPAL password' lock in the Acer Aspire Vero AV15-51-55 are??

VetPcUser
VetPcUser Member Posts: 4 New User
edited October 2022 in Aspire Laptops

I have enabled the HDD(OPAL) Passsword in the BIOS of my recently purchased Acer Aspire Vero laptop. I preffer this option as opposed to Bitlocker since there is zero performance hit versus Bitlocker's software encryption which WILL slow down the SSD slightly. I upgraded Windows to Pro version, so Bitlocker is available.


Does anyone know if the OPAL password is stored on the SSD or the TPM chip? Is setting the OPAL password just as secure as Bitlocker?


Thanks all.


[Edited the thread to add model name to the title]

Best Answer

  • JackE
    JackE ACE Posts: 44,871 Trailblazer
    Answer ✓

    Seems to. Looks like setting the BIOS opal password tells the SSD to encrypt itself. And to de-crypt data only to users with that password. BIOS opal revert option tells the SSD to erase all encrypted data and to re-set itself to factory fresh unencrypted default state. Sounds scare-y. I'd probably not tempt Murphy's law and start messing with it. Here's a list of the SSDs apparently used in that model.



    Jack E/NJ

Answers

  • William_mk2
    William_mk2 ACE Posts: 4,198 Pathfinder
    edited October 2022

    @VetPcUser


    Kindly go through the details from the link given below


    The info from the links given below will help you to find where the bios password are stored. Please also go through the opal lock user guide.




    https://fidelityheight.com/wp-content/uploads/2020/07/Opal-Lock-User-Guide.pdf

    Click on "Like" if you find my answer useful 

    Click on "Yes" if it answers your question.


    Please click YES if I answered your question

    I am not an ACER employee
    B  Thank you and have a BLESSED AND HAPPY DAY  B


                                         ★★ WILLIAM - MRK ★★

  • JackE
    JackE ACE Posts: 44,871 Trailblazer

    >>>Does anyone know if the OPAL password is stored on the SSD or the TPM chip?>>>

    BIOS chip stores password whether or not TPM chip is present. TPM chip handles encryption. Accordingly, BIOS won't hand over its basic i/o hardware initialization to the operating system without the password.

    Jack E/NJ

  • VetPcUser
    VetPcUser Member Posts: 4 New User

    Isn't the SSD(Kingston OM8PDP3512B) that's in this model a SED type where encryption is handled on the SSD itself?

    If it is and I 'forget' the password, it means there is NO way to decrypt the SSD, correct?

  • JackE
    JackE ACE Posts: 44,871 Trailblazer

    What full Vero model series number do you have? For example, AV15-52? To check for factory installed SED options. Not usually installed on most machines. Or post a phone photo of the BIOS INFORMATION tab. If you forget any password, BIOS user or SED, you're in trouble.😮

    Jack E/NJ

  • VetPcUser
    VetPcUser Member Posts: 4 New User

    I have the Acer Aspire Vero AV15-51-55


    In the 'Security' tab of the BIOS;


    Set HDD(OPAL) Password: [Enabled]

    Change HDD(OPAL) Password: Change

    Revert HDD(OPAL) Device: [Enter]


    Current TPM (TCM) State: Installed

    Change TPM (TCM) State: [Enabled]

    Clear TPM(TCM):


    Since this Kingston OM8PDP3512B-AA1 is an OEM SSD there is no technical info on the Kingston website.

    I'm only guessing it is a SED because these options are available in the BIOS, does that make sense?

  • JackE
    JackE ACE Posts: 44,871 Trailblazer
    Answer ✓

    Seems to. Looks like setting the BIOS opal password tells the SSD to encrypt itself. And to de-crypt data only to users with that password. BIOS opal revert option tells the SSD to erase all encrypted data and to re-set itself to factory fresh unencrypted default state. Sounds scare-y. I'd probably not tempt Murphy's law and start messing with it. Here's a list of the SSDs apparently used in that model.



    Jack E/NJ

  • VetPcUser
    VetPcUser Member Posts: 4 New User

    Thanks JackE I think that's correct! 👍️

  • JackE
    JackE ACE Posts: 44,871 Trailblazer

    >>>Bitlocker's software encryption which WILL slow down the SSD slightly>>>Is setting the OPAL password just as secure as Bitlocker?>>>


    Agreed. The card's embedded encrypt/decrypt mechanism seems more efficient/faster than an external one. Security might be better as an opal-flavored BIOS seems to be needed to change anything or reset.

    Jack E/NJ