Skip to content

sed: clarifying SUM sed policy reporting#3412

Open
bbain wants to merge 1 commit into
linux-nvme:masterfrom
bbain:fixing-sed-policy-reporting
Open

sed: clarifying SUM sed policy reporting#3412
bbain wants to merge 1 commit into
linux-nvme:masterfrom
bbain:fixing-sed-policy-reporting

Conversation

@bbain
Copy link
Copy Markdown
Contributor

@bbain bbain commented Jun 2, 2026

The SUM policy bit indicates if the linked SUM user is in control of the the range (and common name) of its SUM locking range. A policy of 0 indicates the SUM user is in control. A policy of 1 indicates that any admin is in control. The value is set to 1 by default when SUM is disabled. An admin will set the policy when SUM is enabled. See section 4.2.1.4 of TCG Storage Opal SSC Feature Set: Single User Mode v1.00.

The SUM policy bit indicates if the linked SUM user is in control of the
the range (and common name) of its SUM locking range.  A policy of 0
indicates the SUM user is in control.  A policy of 1 indicates that
any admin is in control. The value is set to 1 by default when SUM
is disabled. An admin will set the policy when SUM is enabled. See
section 4.2.1.4 of TCG Storage Opal SSC Feature Set: Single User
Mode v1.00.

Signed-off-by: Brenden Bain <brenden.bain@gmail.com>
@bbain bbain force-pushed the fixing-sed-policy-reporting branch from 2c6d2d8 to 55b7044 Compare June 2, 2026 03:16
@bbain
Copy link
Copy Markdown
Contributor Author

bbain commented Jun 2, 2026

I tried to clarify this reporting from the SED plugin. SUM lets users take control of the locking regions. SUM lets the region's user unlock, secure erase and set the password for the region (i.e. but setting their own password). The admin is never able to see the data as it does not know the password for the region. The policy indicates whether or not the admin also wants to let the user configure the location of the region (i.e. its start and length) and its common name.

From § 4.2.1.4 of TCG Storage Opal SSC Feature Set: Single User Mode v1.0

4.2.1.4 Policy

This bit is 1 if Admins authority maintains ownership of the RangeStart and RangeLength of Locking objects in
Single User Mode, or if the Locking SP is in any life cycle state other than Manufactured or Issued.

This bit is 0 if User authorities of Locking objects in Single User Mode have ownership of their associated
RangeStart and RangeLength columns.

@igaw
Copy link
Copy Markdown
Collaborator

igaw commented Jun 2, 2026

Looks good to me. The only thing I wondering if we should keep it backwards comparability? We could argue this will be released under new a major version update :)

@gjoyce-ibm any objections?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants