OPENTEXT Tableau Forensic TD2u User manual

OpenText Tableau TD2u
Forensic Duplicator
User Guide
The Information Company

2 The Information Company
Contents
1Preface ......................................................................................................... 4
1.1 About this guide..................................................................................... 4
1.2 Conventions used in this guide............................................................... 4
1.3 Disk capacity and transfer rate measurement conventions ..................... 4
2Overview ...................................................................................................... 5
2.1 Tableau TD2u........................................................................................ 5
2.2 TD2u kit contents................................................................................... 5
2.3 Navigating the TD2u .............................................................................. 7
2.4 Reading the LEDs.................................................................................. 8
2.5 USB keyboard support........................................................................... 9
3Setting up the TD2U .................................................................................... 9
3.1 Startup sequence................................................................................... 9
3.2 Initialization.......................................................................................... 10
3.3 Configuring the TD2u........................................................................... 10
3.4 User-selected startup mode ................................................................. 10
3.5 System Settings (Menu 7.1)................................................................. 10
3.6 Set Examiner Name (Menu 7.1.2) ........................................................ 13
3.7 Imaging Setup (Menu 7.2).................................................................... 13
3.7.1 Error recovery modes............................................................... 16
3.8 Factory Reset (Menu 7.3) .................................................................... 16
3.9 Duplicator Info (Menu 8)....................................................................... 16
3.10 Connecting hard drives ........................................................................ 17
3.11 Drive detection..................................................................................... 18
4Using the TD2u .......................................................................................... 19
4.1 Overview ............................................................................................. 19
4.2 TD2u menus and options ..................................................................... 19
4.3 Duplicate (Menu 1) .............................................................................. 20
4.3.1 Initiating a duplication job (Menu 1) .......................................... 20
4.3.2 Image destinations ................................................................... 22
4.4 Preconditions checking ........................................................................ 23
4.5 Wipe disk (Menu 2).............................................................................. 24
4.5.1 Single pass wipe ...................................................................... 25
4.5.2 Multi-pass wipe ........................................................................ 25
4.5.3 Secure erase............................................................................ 25
4.6 Encryption (Menu 3)............................................................................. 26

OpenText Tableau TD2u Forensic Duplicator
The Information Company 3
4.6.1 Encrypt new destination (Menu 3.1).......................................... 26
4.6.2 Unlock Destinations (Menu 3.2)................................................ 27
4.6.3 Change Dest Password (Menu 3.3).......................................... 28
4.7 Disk information (Menu 4) .................................................................... 28
4.8 Disk utilities (Menu 5)........................................................................... 30
4.8.1 Format (Menu 5.1).................................................................... 30
4.8.2Hash (Menu 5.2) ...................................................................... 31
4.8.3 Blank Check (Menu 5.3)........................................................... 32
4.8.4 HPA, DCO, and AMA removal (Menu 5.4) ................................ 32
4.9 Status information................................................................................ 33
4.10 Logs menu (Menu 6)............................................................................ 34
4.10.1 View Logs (Menu 6.1)............................................................... 34
4.10.2 Save All Logs (Menu 6.2) ......................................................... 37
4.10.3 Delete All Logs (Menu 6.3) ....................................................... 38
4.10.4 Print All Logs (Menu 6.4) .......................................................... 38
4.11 Resetting and clearing internally stored information.............................. 38
5Troubleshooting and support ................................................................... 40
5.1 Troubleshooting common problems ..................................................... 40
5.1.1 Power supply issues................................................................. 40
5.1.2 Problems with disk detection .................................................... 41
5.1.3 Problems with encrypted drives ................................................ 42
5.2 Replacing the backup battery for the real-time clock............................. 43
5.2.1 Compatible batteries ................................................................ 43
5.2.2 Replacing the battery ............................................................... 43
5.2.3 Testing the new battery ............................................................ 46
About OpenText.......................................................................................... 47

4 The Information Company
1 Preface
1.1 About this guide
This guide presents a wide range of technical information and procedures for using the
TD2u. It is divided into the following chapters.
•Overview: Provides general information about the TD2u as well as unpacking,
starting up, and navigating the TD2u menus and indicators.
•Setting up the TD2u: Provides system overview information about the TD2u as well
as procedures for configuring and connecting the TD2u.
•Using the TD2u: Provides detailed information and procedures for using the TD2u.
•Troubleshooting and Support: Provides a brief list of potential problems and
solutions. For more complete and current troubleshooting information as well as
answers to fre-quently asked questions (FAQ), visit the Tableau web site at
security.opentext.com.
1.2 Conventions used in this guide
The TD2u has two soft keys placed immediately under the LCD display. The bottom line
of the display shows text indicating the current function for each of the two soft keys. In
this guide, soft key labels are indicated with square brackets. For example, [Select]
indicates that Select is displayed above a soft key on the display.
1.3 Disk capacity and transfer rate
measurement conventions
The computer industry generally adheres to two different conventions for the definitions
of the terms megabyte (MB) and gigabyte (GB). For computer RAM, 1 MB is defined as
220 = 1,048,576 bytes and 1 GB is defined as 230 = 1,073,741,824 bytes. For disk
storage, 1 MB is defined as 106 = 1,000,000 bytes and 1 GB is defined as 109 =
1,000,000,000 bytes. These two conventions are known as powers of two and powers of
ten respectively. Microsoft deviates from the hard disk capacity measurement convention
and uses the powers of two convention for its operating systems.
Tableau reports disk capacities and transfer rates according to the industry standard
powers of ten convention. In TD2u screens, reports, and documentation, a 4 GB hard
disk stores up to 4,000,000,000 bytes; a hard disk with a 150 MB/sec transfer rate
transfers 150,000,000 bytes per second.
Note: For a complete list of changes for a given TD2u firmware release, see the release
notes for the latest TFU version on the Tableau products web page at
security.opentext.com.

OpenText Tableau TD2u Forensic Duplicator
The Information Company 5
2 Overview
2.1 Tableau TD2u
The Tableau TD2u is a forensic duplicator capable of performing 1:1, 1:2, and 1:3
duplications. It has many of the functions traditionally found in general-purpose, IT-
oriented hard disk duplicators and provides features and functions that serve the
specialized needs of forensic practice, including:
•Sustained data transfer rates of up to 16 GB/minute, while performing calculations of
MD5, SHA-1, and SHA-256 hash values, also known as fingerprints.
•Native support for USB 3.0, SATA and IDE hard disks from the source interface.
•Parallel duplication to two SATA and one USB 3.0 destination hard disks.
•Parallel image and clone duplication.
•Optional destination disk encryption to ensure security of imaged source data.
•Detailed log generation for case documentation.
•Automatic blank checking of source and destination drives.
•HPA, DCO, and AMA support for the detection and handling of hidden/protected data
areas on source and destination drives.
•Automatic shutdown/standby of idle drives.
•Multi-lingual support for the UI and character input.
2.2 TD2u kit contents
The TD2u ships in a boxed kit that includes the following:
Item
Model #
Description
TD2u
TD2u Forensic Duplicator

6 The Information Company
Item
Model #
Description
TP5-NC
High-output power supply. The TP5
provides enough power to supply
the TD2u and most common
combinations of source and
destination hard disks. The TP5
uses a universal 2-pin AC line cord
and is compatible with 110-240VAC
line voltages worldwide.
TP5-LC-US
North America shipments include
the TP5-LC-US AC line cord for use
with the TP5-NC power supply.
When shipped to other geographic
markets, the local reseller typically
adds an AC line cord appropriate for
the local market.
TC2-8-R2
Hard disk power cable to connect
IDE and some legacy-style SATA
hard disks to the TD2u (3M to
Molex).
TC3-8
SATA signal cable to connect SATA
hard disks to the TD2u.
TC4-8-R2
SATA/SAS power/signal cable to
SAS and 3M power (2 pieces). This
unified cable connects power and
signal connectors current hard
disks.
TC5-8-R2
Hard disk power cable to connect
15-pin SATA power connectors to
the TD2u (SATA to 3M).

OpenText Tableau TD2u Forensic Duplicator
The Information Company 7
Item
Model #
Description
TC6-8
IDE signal cable to connect IDE
hard disks to the TD2u. Do not use
the TC6-8 IDE cable to connect
notebook drive adapters to the
TD2u. Use the shorter TC6-2 IDE
cable shown with the TKA5-AD
adapter pack below.
TC8
USB 2.0 cable. Used to connect the
TD2u to a host computer for
firmware updates.
TQS-TD2u
Quick Start card for the TD2u kit.
Do not discard the foam packaging. It is designed to fit several industry-standard hard-
sided carrying cases. If you received the TD2u kit in the cardboard box shipped by
Tableau, you can buy a hard-sided case and reuse the foam insert directly in that case.
2.3 Navigating the TD2u
When using the TD2u, you may be prompted to enter certain information into the display.
Use the up/down/left/right arrow keys and the center button to select values.
While you are entering information, the TD2u displays two soft key functions at the
bottom of the LCD display. The soft keys perform major actions such as selecting a task,
canceling a function, or moving between different display screens. Use the arrow keypad
to navigate within a given screen/menu. The function of the soft keys depends on the
current context. The soft keys might have functions such as [Back] and [Next], as they
do during the Configuration Wizard. The soft keys might also serve to select items like
[Cancel] and [Ok].

8 The Information Company
The center button on the arrow keypad also serves as a [Select] button when navigating
among TD2u menus. It cannot be used to start major tasks, such as duplication or disk
wiping. Only soft keys labeled [Select] or [Start] initiate major tasks. Vertical Arrow Keys
scroll up or down and highlight menu items for selection. Horizontal Arrow Keys scroll left
or right and toggle between character lists.
In the upper right corner of the Main menu, the TD2u displays the date and time. As you
navigate the TD2u menu structure, the menu item number displays in the upper left hand
corner. For example, the Disk Utilities menu is Menu 5, the Format menu is Menu 5.1, the
Hash menu is Menu 5.2, and so on. These menu numbers help you navigate the menu
hierarchy.
The TD2u ships with a Quick Start card illustrating the layout of the display, buttons,
connectors, and switches on the TD2u. Keep the Quick Start card with the TD2u as you
familiarize yourself with its operation.
2.4 Reading the LEDs
The front of the TD2u has nine light emitting diode (LED) indicators. A tenth LED is
located on the rear of the TD2u, near the power connector.

OpenText Tableau TD2u Forensic Duplicator
The Information Company 9
The SATA Source, IDE Source, and USB Source LEDs indicate that the source drive is
connected to the left side of the TD2u The SATA, Dest 1, SATA Dest 2, and USB Dest
LEDs indicate that the destination drives are connected to the right side. A yellow Alert
LED on the right flashes to indicate the need for user intervention.
2.5 USB keyboard support
You can connect a standard USB keyboard to any of the USB ports on the front and back
of the TD2u. Using a keyboard for data entry can be faster and more convenient than
using the arrow keypad on the TD2u.
When using a USB keyboard the Enter key on the keyboard generally corresponds to the
right soft key on the TD2u. The Esc (escape) key on the keyboard generally corresponds
to the left soft key.
If your keyboard has arrow keys or a mouse-like input device, the up and down arrows
(or mouse actions) generally correspond to the up and down (vertical) arrows on the
TD2u.
3 Setting up the TD2U
3.1 Startup sequence
The TD2u is optimized for the needs of forensic practitioners and computer forensic
processes.

10 The Information Company
3.2 Initialization
After you turn on the TD2u, the device takes about five seconds to initialize and run a
self-test procedure. The screen is blank and unlit until the self-test is complete. An LED
check is then conducted so you can verify that all of the LEDs are functioning. When
initialization is complete, the TD2u displays warning messages about any detected faults.
3.3 Configuring the TD2u
The TD2u comes ready to be connected to the TP5 power supply and turned on.
After running a three-second initialization and self-test procedure, the TD2u starts the
Configuration Wizard. The Configuration Wizard prompts you for the default username,
current date/time, and preferred startup mode. The TD2u stores these settings in non-
volatile flash memory for use at each startup.
The startup mode feature lets you customize the TD2u for a specific workflow. The
Startup Mode setting provides the following options.
•Main Menu
•Duplication (for cloning or imaging)
•Wipe Disk
You can configure the startup mode and other settings at any time from the System
Settings menu (Menu 7.1).
Once you have configured your TD2u, the startup sequence bypasses the Configuration
Wizard unless you have used Factory Reset (Menu 7.3) in the Setup menu.
3.4 User-selected startup mode
The TD2u can be configured to display different screens at initial startup. This setting
allows for quick access to commonly used functions. For example, if you use the TD2u
mainly for duplications, you can customize the startup mode for disk duplication. Details
on this and other settings made by the Configuration Wizard are discussed below in the
section on System Settings (Menu 7.1).
3.5 System Settings (Menu 7.1)
The System Settings menu provides options for setting TD2u options, defaults, and the
current date/time. The System Settings menu also provides options for viewing TD2u
information and current status.
The following table lists additional options and values you can set in System Options.