Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to determine if a particular hard disk drive supports hardware-based full disk encryption. I know I can use the model number and check the manufacturer's website, but that is only feasible if I were doing this for a handful of computers. I have a fleet of about 1000 computers that I want to check for this.

Is there some utility or script that I can run on a remote computer that will query a hard disk drive and find out whether it supports hardware-based full disk encryption? What are some effective hard disk interrogation tactics?

I spent some time searching for a way to do this, but I ended up in a dark alley hearing whispers of IOCTL_ATA_PASS_THROUGH and got scared away.

The vast majority of computers I would like to check are running Windows (XP, Vista, and 7), but I do have several Mac OS X computers that I would like to check, too.

share|improve this question

migrated from Dec 12 '11 at 16:41

This question came from our site for computer enthusiasts and power users.

After reading the blog I realized this may be more appropriate on Server Fault. – William Jackson Dec 12 '11 at 14:39
You might have some luck using hdparam and a batch file. – Breakthrough Dec 12 '11 at 14:50
Note that the drive itself isn't the only requirement. You also need a uefi environment (or some equivalent) preboot environment – Jim B Dec 12 '11 at 19:35
up vote 2 down vote accepted

you can run gwmi win32_diskdrive | foreach {$_.model} to retrive drive models. this can easily be expanded to run across the enterprise. More importantly than the drive is goin gto be whether the bios and/or controller firmware support the drive. While you can install a hardware encrypted drive in any system, not every system will turn on the encryption.

share|improve this answer

I would start with gathering inventory of hardware you have; probably, it's not so many hard drive models at the end. For instance, you can use smartctl from smartmontools (they have a Windows version) and some simple scripting to run smartctl -a sda > logFile on each machine and send you the report. The first few lines of the log file will contain the drive model.

When it comes to the interrogation techniques take a look here.

share|improve this answer
+1 for the comprehensive resource on hard disk interrogation tactics. – Skyhawk Dec 12 '11 at 19:39

I would use OCS Inventory NG to collect information on all of your hardware, including hard drive and system/motherboard model numbers. I would then run a very simple SQL query against the OCS configuration database (which is implemented comprehensibly using MySQL) to identify the different combinations of system and HDD that you have in place.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.