Using Sedutil to PSID Revert a Samsung or Crucial SSD

If you use Windows 10 Pro with a Microsoft Account you may have used Bitlocker by default with your SSD. As a result your SSD will be encrypted and this encryption may prevent Dell Data Wipe or Parted Magic from being able to perform a Secure Wipe on the SSD at a later stage. In the case of Parted Magic it will unfortunately hide the SSD and then when told to list all devices it will show the SSD as unsupported. To get around this we need to revert the Physical Security ID. The Physical Security ID is a long code printed on the label affixed to the SSD and you will require this code in order to Revert the SSD. Before starting take a picture of this label:

For this guide we will use a Utility to revert the PSID of a Samsung or Crucial SSD. This utility is available as a .exe that can be run within Windows or alternatively can be made into a Bootable USB. Other vendors of SSD are likely supported but I have only personally tried SSDs from these two vendors.

Tutorial Video Windows Version

Tutorial Video Bootable USB Version

Written Guide Windows Version

Sedutil is available as a Windows .exe here:

Download sedutil_WIN.zip and the vc_redist.x64.exe from Microsoft in the link above. Install vc_redist.x64.exe (if required, it wasn’t needed on my clean install of Windows 10 Version 1903):

Right click sedutil_WIN.zip and select Extract All…:

Use the default location:

The extracted folder should be opened automatically. Go to the Win32 subfolder:

Then the release subfolder:

Here you should have the sedutil-cli.exe application:

Copy it:

Now go to

HTML

And paste the sedutil-cli Application here:

Select Continue to copy with administrative permissions:

Go to start:

Type in CMD

Right click the Windows Command Prompt and Select Run as Administrator.

Accept the User Account Control:

Launching CMD as an administrator, automatically starts it in the folder C:\Windows\System32 with administrative capabilities:

Type in the following command:

HTML

Your Drives will be listed. In this case we are interested in the Samsung SSD which is Drive 1. We are also given some details about the SSD and its current firmware:

Tho get more details we can query the SSD by typing in:

HTML

Where X is replaced by your Drive Number for example Drive1:

HTML

This will give you more information about the SSD:

To perform the PSID Revert we need the PSID on the label:

This image has an empty alt attribute; its file name is Screenshot-8-1.png

To perform the PSID reset, please type in:

HTML

In my case:

HTML

Ensure you get the case of the text correct. The PSID should all be capitalised, it is a long number be careful and ensure you type it in correctly.

You should be informed that the PSID revert has completed successfully:

You can now close the Command Prompt by typing in exit or using the close button:

Written Guide Bootable USB Version

The Sedutil Bootable USB uses a Legacy Boot and does not pass Secure Boot. The Boot Settings need to altered in the UEFI BIOS in order for the Sedutil Bootable USB to Boot.

Parted Magic Version 2019-05-30 has Sedutil inbuilt and supports a UEFI Boot and passes Secure Boot however the Sedutil Version bundled in Parted Magic is 1.12 and is out of date compared to the 1.15 Version… A Developer at Parted Magic has stated that the next Parted Magic Version will be updated to include the Sedutil Version 1.15. Instructions for Parted Magic are here:

The rest of this guide focuses on Sedutil 1.15 which can be downloaded here:

Extract it with 7zip to get the iso:

Then use Rufus to make the Bootable USB from the iso

Double click the Rufus application:

Accept the User Account Control Prompt:

Select “select”:

Select the Rescue32.img extracted folder:

Select your iso:

Then ensure your USB is listed under Device:

This iso is pretty basic and unfortunately has not been updated to support a UEFI Boot with Secure Boot. There are thus no options, select Start to make the Bootable USB:

Select OK at the warnings. Note all data on your USB flash drive will be formatted:

Rufus will make the Bootable USB:

When done it will say “Ready”:

This Bootable USB does not pass Secure Boot or a UEFI Boot so both will need to be disabled in order to Boot from the USB:

For more details about Secure Boot see my guide:

The Sedutil utility should Boot under these conditions:

Log on by typing in:

HTML

And then press [Enter]:

Next to list all the drives type in the following command

HTML

Then press [Enter]:

This will list all the drives:

You will need to know what device your system is for the next step. In this case

/dev/sdb

You will also need to know the PSID of your Device in this case: 1451HEQY2PWXL7NQCLPCZLBMLFY05VSU

To perform the PSID reset, please type in:

HTML

In my case:

HTML

Ensure you use the correct case for each character. Note the utility may assume an American keyboard so if / doesn’t work. Use the / on the number triangle.

Then press [Enter]:

You will be informed that the operation completed successfully. Ensure you re-enable SecureBoot now. Once this is done you will be able to use Dell Data Wipe or Parted Magic to Wipe your SSD.

Advertisements