How do I use hardware encryption on an Intel 660p SSD?

[M_R]

I purchased an Intel 660p SSD because the specifications stated that it supports hardware encryption. However, while my prior SSD (a Samsung device) provides an option in the BIOS to set a password, this drive does not.

Another user previously asked a similar question and did not receive an answer, and the question is also being asked on other forums. I am beginning to believe the specifications stating this drive supports hardware encryption are deceptive. If that is not the case, please provide instructions on how to enable hardware encryption with a user-provided secret on Windows, Linux, and MacOS.

Thanks.

[n_scott_pearson]

This can depend upon the motherboard and its BIOS. Please download and run the Intel System Support Utility for Windows and attach the log file it produces to a response post.

...S

[M_R]

Hi Scott,

Thanks for your reply. At this time I'm preparing to return the device (the return window ends this week), so I'm not about to image my Windows install onto it, especially given the evidence that it does not support any encryption accessible to end users (see below). I did run the Intel SSU for Linux from a live USB stick, but it did not even examine the drive; the Linux version is a shell script, and it only appears to examine /dev/hd* and /dev/sd* devices, so the output did not include any data for this /dev/nvme* device. The output also included various serial numbers, so I'm not inclined to post it in a public forum. (For reference, my system is a Lenovo Thinkpad Yoga 370, and, as stated previously, its UEFI/BIOS supports setting a "Hard Disk1" password for a Samsung NVMe device. That option does not appear when the Intel device is installed.)

Digging deeper into this, I noticed a few things. First, my Samsung SSD states it supports TCG Opal 2.0, which I now understand to be a standard for drive-level hardware encryption. While the Intel product briefs for some "professional"-line SSDs mention supporting TCG Opal, I cannot find a reference to the Intel 660p supporting the same. Second, running sedutil-cli --scan confirmed that the Intel 660p does not support TCG Opal, while the Samsung device does. I therefore conclude that this device does not support TCG Opal. Given the disappearance of the drive password setting in the UEFI config when the Intel device is installed, I further conclude that it does not support an ATA Security-style password, at least with my system.

I've burned most of a weekend working on this, and I've yet to find any reference to a user successfully setting a password for hardware encryption with the Intel 660p. If you know of a method that has worked, please let me know; otherwise, I am returning this device, and will no longer rely on Intel's ark site as an authoritative source of information.

Thanks.

[JosafathB_Intel · Accepted solution]

Hello M.R, Thank you for contacting Intel® Memory & Storage Support. As we understand, you need assistance with your Intel® SSD 600p Series. If we infer correctly we will like to share the following recommendations and information: • Hardware encryption is data encryption done at the drive level. This is used to ensure that the data stored on the drive is secured from unwanted intrusion and the hardware encryption available on your drive is AES 256 bit. • BIOS require support for the setting of NVME password. Some BIOS's can implement a password that will use the hardware encryption. The encryption is always enabled but to ensure security the password would need to be set. Else a software solution would need to be used such as Bitlocker on Windows. In your case, we advise you to contact your OEM (original equipment manufacturer) Lenovo for further assistance on this BIOS feature. • Follow this guide (https://www.howtogeek.com/192894/how-to-set-up-bitlocker-encryption-on-windows/) to use Bit Locker to turn on drive encryption on Windows. If you need further assistance please do not hesitate to contact us. Best regards, Josh B. Intel® Customer Support Technician Under Contract to Intel Corporation Third Party Content: Web Sites and Materials may contain user or third party submitted content; such content is not reviewed, approved or endorsed by Intel and is provided solely as a convenience to our customers and users. Under no circumstances will Intel be liable in any way for any third party submitted or provided content, including, but not limited to, any errors or omissions, or damages of any kind. ANY MATERIAL DOWNLOADED OR OTHERWISE OBTAINED THROUGH THE USE OF THE MATERIALS IS DONE AT YOUR OWN DISCRETION AND RISK AND THAT YOU WILL BE SOLELY RESPONSIBLE FOR ANY DAMAGE TO YOUR COMPUTER SYSTEM OR OTHER DEVICE OR LOSS OF DATA THAT RESULTS FROM THE DOWNLOAD OF ANY SUCH MATERIAL. By your use, you agree that you must evaluate, and bear all risks associated with, the use of any third party content, including any reliance on the accuracy, completeness, or usefulness of such content. All postings and use of the Web Sites or Material are subject to these Terms of Use and any other program and site specific terms.

[Santiago_A_Inte]

Hi M.R,

Greetings from Intel® SSD Support Group.

This is a friendly reminder your case remains open, awaiting for your reply.

Please let us know if you might need further assistance.

Have a nice day.

Santiago A.

Intel® Customer Support Technician

Under Contract to Intel Corporation