Table of Contents
Advertisement
Quick Links
Advertisement
Table of Contents
Related Manuals for OPENTEXT TD2u
Summary of Contents for OPENTEXT TD2u
- Page 1 OpenText Tableau TD2u Forensic Duplicator User Guide The Information Company...
-
Page 2: Table Of Contents
3.10 Connecting hard drives ................ 17 3.11 Drive detection ..................18 Using the TD2u ..................19 4.1 Overview ..................... 19 4.2 TD2u menus and options ..............19 4.3 Duplicate (Menu 1) ................20 4.3.1 Initiating a duplication job (Menu 1) .......... 20 4.3.2... - Page 3 OpenText Tableau TD2u Forensic Duplicator 4.6.1 Encrypt new destination (Menu 3.1) .......... 26 4.6.2 Unlock Destinations (Menu 3.2) ..........27 4.6.3 Change Dest Password (Menu 3.3) .......... 28 4.7 Disk information (Menu 4) ..............28 4.8 Disk utilities (Menu 5) ................30 4.8.1...
-
Page 4: Preface
4,000,000,000 bytes; a hard disk with a 150 MB/sec transfer rate transfers 150,000,000 bytes per second. Note: For a complete list of changes for a given TD2u firmware release, see the release notes for the latest TFU version on the Tableau products web page at security.opentext.com. -
Page 5: Overview
2 Overview 2.1 Tableau TD2u The Tableau TD2u is a forensic duplicator capable of performing 1:1, 1:2, and 1:3 duplications. It has many of the functions traditionally found in general-purpose, IT- oriented hard disk duplicators and provides features and functions that serve the... - Page 6 AC line cord appropriate for the local market. TC2-8-R2 Hard disk power cable to connect IDE and some legacy-style SATA hard disks to the TD2u (3M to Molex). TC3-8 SATA signal cable to connect SATA hard disks to the TD2u.
-
Page 7: Navigating The Td2U
Do not discard the foam packaging. It is designed to fit several industry-standard hard- sided carrying cases. If you received the TD2u kit in the cardboard box shipped by Tableau, you can buy a hard-sided case and reuse the foam insert directly in that case. -
Page 8: Reading The Leds
In the upper right corner of the Main menu, the TD2u displays the date and time. As you navigate the TD2u menu structure, the menu item number displays in the upper left hand corner. -
Page 9: Usb Keyboard Support
The SATA Source, IDE Source, and USB Source LEDs indicate that the source drive is connected to the left side of the TD2u The SATA, Dest 1, SATA Dest 2, and USB Dest LEDs indicate that the destination drives are connected to the right side. A yellow Alert LED on the right flashes to indicate the need for user intervention. -
Page 10: Initialization
3.2 Initialization After you turn on the TD2u, the device takes about five seconds to initialize and run a self-test procedure. The screen is blank and unlit until the self-test is complete. An LED check is then conducted so you can verify that all of the LEDs are functioning. When initialization is complete, the TD2u displays warning messages about any detected faults. - Page 11 Once you have set the desired date and time, press the [Save] soft key to record your changes. Finished Alert When On, the TD2u flashes the yellow Alert LED at the end of a normal/successful acquisition/task. When Off, the TD2u flashes the yellow Alert LED only if there is an unusual condition or error.
- Page 12 This reduces 5 Minutes drive wear and tear and power consumption for situations where the 10 Minutes user is away from their TD2u for 15 Minutes extended periods of time. This Drive Shutdown Delay setting represents the length of time from job/task completion to when the drive is shutdown or put into standby mode.
-
Page 13: Set Examiner Name (Menu 7.1.2)
3.6 Set Examiner Name (Menu 7.1.2) If you are using an external keyboard, entering the Examiner Name is fairly straightforward. Using the TD2u keypad requires scrolling through individual characters. The characters are divided into four categories that appear at the bottom of the screen: Capital letters (A) •... - Page 14 Sets the extension to the default value or .dmg. .dmg Case ID Prompt Skip When set to Prompt, the TD2u prompts the user to enter Case ID. Skip When set to Skip, the Case ID is suppressed in subsequent logs. Case Notes...
- Page 15 The Standard setting retries the 32K block until it either succeeds or the Error Retry Count is exceeded. The Exhaustive setting causes the TD2u to attempt to recover each sector. Error Retry Count Zero Specifies the maximum number of errors allowed on each operation on the source drive.
-
Page 16: Error Recovery Modes
64-sector blocks (32,768-byte blocks). An error in any 64-sector block causes the entire block to be treated as an error. This allows the TD2u to move quickly through a drive with many read faults, but at the loss of some potentially readable sectors near each fault. -
Page 17: Connecting Hard Drives
The build date of the TD2u firmware release 3.10 Connecting hard drives Viewing the front of the TD2u, the source drive attaches to the left side of the duplicator and the destination drive(s) attach to the right side. The following procedure provides the steps for connecting hard disks to the TD2u. This procedure applies to typical 3.5"... -
Page 18: Drive Detection
Note: When connecting an IDE source disk to the TD2u, always connect the blue end of the IDE cable (TC6-2 or TC6-8) to the TD2u and the black end to the hard disk. If using other than a Tableau-supplied cable, ensure that the colored stripe on the cable aligns with Pin #1 on the hard disk. -
Page 19: Using The Td2U
TD2u menu tree to facilitate navigation of the TD2u. 4.2 TD2u menus and options The menus and screens in the TD2u are arranged in a tree structure. Under the Main menu, each branch of the tree is numbered to guide you as you navigate the menu tree. -
Page 20: Duplicate (Menu 1)
Note: Starting with TD2u firmware version 1.3, the selection of clone or image for a specific destination drive is no longer done through distinct sub-menus. Selecting the Duplicate item will launch a Duplicate job setup page that allows for in-line selection of clone or image for all connected destination drives. - Page 21 LCD. To see detailed information, press the [Details] soft key. The TD2u provides a high degree of flexibility in selecting defaults for each field so that you can configure the TD2u to match your desired workflow.
-
Page 22: Image Destinations
If a destination disk already has an acceptable format and sufficient free space to store the image, the TD2u uses that format. If a destination disk is not formatted the TD2u prompts you for confirmation to format the disk. This reduces the risk of overwriting valuable data. -
Page 23: Preconditions Checking
OpenText Tableau TD2u Forensic Duplicator A .LOG file is generated by the TD2u for each disk-to-file acquisition. yyyy-mm-dd hh- mm-sec is the duplication task start date/time. The last part of the filename is the name of the type of task. -
Page 24: Wipe Disk (Menu 2)
You may want to wipe the destination disk before use, especially when doing disk-to-disk cloning. The TD2u provides three options to wipe a destination disk: a fast single-pass wipe, a multi-pass wipe, or a Secure Erase. Follow the steps below to specify the type of... -
Page 25: Single Pass Wipe
Single Pass, Multiple Pass, Secure Erase, or you can choose to have the wipe startup prompt you for a type at that time. 3. Follow the steps listed in “Connecting hard drives” on page 17 and turn on the TD2u. No source disk is necessary. -
Page 26: Encryption (Menu 3)
4.6 Encryption (Menu 3) The TD2u can encrypt destinations using whole disk encryption. All data stored on the destination is encrypted and hosts will only read seemingly random data until it is decrypted. Decrypting the data requires special decryption software/hardware and knowledge of the password used for encryption. -
Page 27: Unlock Destinations (Menu 3.2)
This operation allows you to unlock destinations that appear to have been encrypted by a TD2u. When you click [Start] there is a prompt to enter passwords for each destination to be unlocked. Unlocking encrypted destinations takes 15 to 20 seconds. -
Page 28: Change Dest Password (Menu 3.3)
15 to 20 seconds. 4.7 Disk information (Menu 4) The TD2u can display detailed information about the source or the destination hard disk(s). From the Disk Info (Menu 4.0) screen, select any drive attached to a source or destination port. - Page 29 This feature behaves like Unlock Drive but (VERY RARE) allows drives with 4096 byte sector sizes that were encrypted prior to TD2u v1.3.0 to be unlocked such that their data may be recovered. These drives were not encrypted in a way compatible with the Unlock Drive feature nor with most third-party tools like VeraCrypt.
-
Page 30: Disk Utilities (Menu 5)
Note that ATA Security locked drives cannot be used for TD2u operations. 4.8 Disk utilities (Menu 5) The TD2u offers several utilities to assist with the processing of drives. These utilities can be found in Menu 5. 4.8.1 Format (Menu 5.1) When using disk-to-file imaging, the destination drive must be formatted with a file system that is recognizable by the TD2u. -
Page 31: Hash (Menu 5.2)
Format, during which it writes the necessary Master Boot Record, Partition Boot Record, and data structures to the destination disk. The TD2u does not do a full surface scan of the destination disk. If you want to verify the integrity of the destination disk you should format it using the disk utilities of a traditional computer and operating system. -
Page 32: Blank Check (Menu 5.3)
The Blank Check menu lets you do a quick blank check on the source or either destination drive. The TD2u performs a quick check to determine if the selected disk appears to be blank by reading sectors in the Primary and Secondary GPT. A sector is considered to be blank if it contains only a repeating pattern such as 00h, E5h, or FFh. -
Page 33: Status Information
Expect to see the instantaneous transfer rate at the beginning of a duplication task decrease up to 50% by the end of the task. This transfer rate decrease is normal and does not indicate a problem with any of the hard disks involved or with the TD2u. The Information Company... -
Page 34: Logs Menu (Menu 6)
Selecting the View Logs option displays a list of the logs currently recorded in the internal flash memory of the TD2u. The most recent log entry is displayed at the top of this list with the oldest log entry at the bottom (end) of the list. - Page 35 Task did not completely normally. Task canceled. AMPLE U LOG The TD2u maintains detailed logs for each task initiated by the user. Here is a sample of an error-free log for a 1:3 Disk Duplication job: -------------------Start of TD2u Log Entry----------------------- Task: Disk Duplication...
- Page 36 DCO Block Count: 500,118,192 Encrypted: No -------------------------SATA Dest 1----------------------------- Interface: SATA Model: Micron_1100_MTFDDAK256TBN Firmware Revision: M0MU031 Serial Number: 18271D61EABC Capacity in Bytes: 256,060,514,304 (256.0 GB) Block Size: 512 bytes Block Count: 500,118,192 Power-ON Block Count: 500,118,192 AMA In Use: No AMA Block Count: 500,118,192 Encrypted: No Destination Type: Clone...
-
Page 37: Save All Logs (Menu 6.2)
4.10.2 Save All Logs (Menu 6.2) You can save all logs to a USB storage device connected to one of the TD2u USB ports. After connecting a USB storage device to one of the TD2u USB ports, select the Save All Logs option to save the logs. -
Page 38: Delete All Logs (Menu 6.3)
4.10.4 Print All Logs (Menu 6.4) You can print all logs to a USB printer attached to one of the TD2u USB ports. After connecting a USB printer to one of the TD2u USB ports, select the Print All Logs option to print the logs. - Page 39 OpenText Tableau TD2u Forensic Duplicator Logs include detailed information about each disk device attached to the TD2u; this includes make/model, serial number, capacity, and so on. The third and final non-volatile memory is the on-board real-time clock (RTC) with battery backup.
-
Page 40: Troubleshooting And Support
It is normal to hear the source and destination drives spin up separately. There is a green DC power LED on the rear edge of the TD2u, next to the female DC power barrel connector. If the TP5 power supply is connected properly to the TD2u and to AC power, the green LED illuminates. -
Page 41: Problems With Disk Detection
5.1.2 Problems with disk detection When using a product like the TD2u, the most common problem users encounter is a failure to achieve drive detection. Most drive detection problems are the result of improper cabling. The following table lists the most common drive detection problems and corrective actions. -
Page 42: Problems With Encrypted Drives
Tableau issues firmware updates to address most compatibility issues. If your hard disk is not recognized by the TD2u, check the Support pages on the Tableau web site (security.opentext.com) to see if any firmware updates are available for the TD2u. -
Page 43: Replacing The Backup Battery For The Real-Time Clock
CR1220 5.2.2 Replacing the battery It is necessary to open the TD2u case in order to replace the battery. You need a #1 Phillips screwdriver to open the TD2u case and a small flat-blade screwdriver to remove the battery. The following procedure provides the steps for replacing the battery: 1. - Page 44 Board) to stay with the top of the case when the bottom is removed. 5. The fan used in the TD2u is attached to the lower half of the plastic case. Carefully lift the lower half of the case away from you.
- Page 45 OpenText Tableau TD2u Forensic Duplicator The backup battery is near the heatsink, as shown in the photograph below. The Information Company...
-
Page 46: Testing The New Battery
5.2.3 Testing the new battery After you have securely fastened the TD2u case, return it to its normal upright position and attach just the TP5 power supply. Turn the TD2u on and observe the startup sequence. You should not see a battery warning dialog, but you will probably see a date/time warning to reset the RTC. -
Page 47: About Opentext
OpenText Tableau TD2u Forensic Duplicator About OpenText OpenText enables the digital world, creating a better way for organizations to work with information, on-premises or in the cloud. For more information about OpenText (NASDAQ/TSX: OTEX), visit opentext.com. Connect with us: OpenText CEO Mark Barrenechea’s blog...