From Setup to Secure Erase: A Full Look at What Opal Lock Covers

Drive security is not a set-and-forget problem, and Opal Lock is built with that in mind. With each release, it adds features that make managing self-encrypting drives (SEDs) more reliable, more intuitive, and easier to prove for compliance purposes. Here is where things stand today.

What Opal Lock Does

Opal Lock is a Windows application for managing TCG Opal self-encrypting drives. It does not turn a regular drive into an SED. Instead, it gives you full control over the encryption that is already built into compatible drives, covering setup, locking, password management, auditing, and secure erasure.

It supports Opal 1.0, 2.0 and Pyrite 1.0, 2.0, and works with SATA, NVMe, and USB drives on Windows 10, Windows 11, and Windows Server 2019/2022. There is also a free version, Opal Lock Lite, for users who need to unlock compatible USB drives without a paid license.

Security and Setup

Restricted setup for system drives

If a system drive does not support writing a pre-boot image to its Shadow MBR, Opal Lock blocks the setup entirely. This stops you from ending up in a situation where a locked drive cannot be booted.

Battery level protection

Before any setup begins, Opal Lock checks the battery level. Setup is blocked at 10% or below, and a warning appears between 10% and 20%. A mid-setup power cut on an encrypting drive is the kind of problem you really do not want to deal with.

Reliable drive scanning

Opal Lock now uses modern Microsoft WMI PowerShell cmdlets instead of legacy system commands for all drive scanning, identification, and management tasks. The result is faster, more accurate detection across all supported drive types.

Auto detection

A background service picks up drive insert and removal events automatically, so the interface always reflects what is actually connected without needing a manual rescan.

Locking, Unlocking and Passwords

Lock without a power cycle

You can lock a drive directly from the app by entering the admin or user password. No need to shut down or restart.

Auto unlock

If the password is saved on the system drive or a USB flash drive, Opal Lock will unlock a connected SED automatically on insert.

Encrypted password to a custom location

Passwords can be saved to any folder you choose, including one that syncs to a cloud drive, giving you a flexible backup option.

Pre-boot authentication

Standard and Premium editions support a pre-boot image on the Shadow MBR or a recovery USB, so a locked system drive can be unlocked before Windows loads.

Erasure and Compliance

Instant Secure Erase

Wipe a drive completely using either an admin password or PSID. The data is cryptographically erased and unrecoverable instantly.

Certificate of Sanitization

A verified certificate is generated automatically after a successful erase. It now logs every action taken during the process, including the date, time, system and the method used and the drive's setup status at the time, making it a genuinely useful compliance document rather than just a formality.

Multi-Drive Management

Premium users can set up, change passwords, and lock or unlock multiple drives at once with a single click. If you are managing a fleet of devices, this alone saves a meaningful amount of time.

Opal Lock keeps getting more capable without getting more complicated. Whether you are an individual protecting a single laptop or an IT team managing dozens of drives, the features above give you the control and the paper trail that good drive security actually requires.

Download Opal Lock and start protecting your drives today.