OPAL/SED hardware disk encryption detection on Linux
· One min read
XFA's Linux disk-encryption check now recognises TCG OPAL self-encrypting drives* alongside LUKS.
When drive locking is enabled on an OPAL-capable drive, the device counts as encrypted, giving administrators accurate compliance reporting for Linux devices that rely on hardware encryption.
Review your disk-encryption policy
*Detection covers TCG OPAL 1.x and 2.x drives reported bysedutil-cli. Non-OPAL SED variants (TCG Pyrite, Ruby, and Enterprise SSC) and OPAL drives whose locking has not been activated are not recognised as encrypted.