Hey! I appreciate any comments, I would like to encrypt my data using SSD native on disk encryption, change the key to a “dummy” key leaving the data hidden at rest, then later swap in the “correct” key and begin using the data again. I have taken a look at sedutil-cli and nvme-cli but I can’t see a way to change the MEK/DEK which I believe are they keys I need to swap in and out.
Is this possible?
What are you using to encrypt the drive? Gonna depend on that’s ability to rekey but that’s a pretty standard feature with PKI.