WiebeTech Forensic ComboDock v4 User manual

F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 1 -
Forensic ComboDock™ v4
USER’S MANUAL
Revised December 30, 2008
Features
•Portable and rugged write-blocked solutions to image drives in the field – WiebeTech's proprietary write-
blocking technology offers easy read-only access to suspect hard drives through high speed FireWire
800 (400 compatible) interfaces.
•Now with HPA/DCO detection. Forensic ComboDock v4 will recognize and report the presence of an
HPA or DCO on a hard drive.
•Retrieve data from 3.5" IDE drives through FireWire 800 (400 compatible) or USB 2.0 – Forensic
ComboDock is the best solution for accessing data from suspect 3.5" IDE drives. With two FireWire
ports, it's daisy-chainable for more versatility.
•Multiple status indicators – show power input/output status, hard drive access, host attachment, and
write-blocking status.
•Rugged design, built to last – Grab it and go! Forensic ComboDock is tough as nails and made to last.
The small and rugged case contains a complete, high speed Oxford Semiconductor OXFW922 bridge
and is constructed from briefcase-tough aluminum for durability. World-compatible AC adapter accepts
100-240VAC so you can trot the globe.
•Connect even more types of drives with Combo Adapters -- Use ComboDock in conjunction with our
lineup of Combo Adapters and retrieve data on other drive types such as 1.8" Toshiba (found in iPods),
1.8" Hitachi drives, MicroDrives (found in iPod mini), PCMCIA drives, 2.5" notebook drives and SATA
drives. See www.wiebetech.com for more information.

CRU-WiebeTech
F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 2 -
Table of Contents
1. Pre-Installation Steps 3
1.1 Forensic ComboDock v4 Accessories 3
1.2 Identifying Parts 3
2. Using Forensic ComboDock v4 4
2.1 Attach a Bottom Plate 4
2.2 Jumper Configuration for 3.5-inch IDE/PATA HDD 4
2.3 Forensic ComboDock v4 Host Connections 4
2.4 Hard Drive Attachment 5
2.4.1 IDE/PATA: 3.5-inch 5
2.5 Forensic ComboDock v4 Power Connections 5
2.6 Using Forensic ComboDock v4 with WiebeTech’s v4 Combo Adapters 5
3. Usage with Mac and Windows Operating Systems 6
3.1 Usage with Macintosh Computers 6
3.1.1 Compatibility 6
3.1.2 Using Volumes 6
3.2 Usage with Windows Operating System 6
3.2.1 Compatibility 6
3.2.2 Using Volumes 6
4. Frequently Asked Questions (FAQ) 6
5. Technical Specifications 8
Forensic Device User Advisory
We recommend that you perform a final check on this product.
Prior to first use, please verify that the write-blocking function of this product is working properly. This is
easily done: attach a known good formatted drive, and verify that the drive mounts properly on your
computer. Use a drive that has data on it that you are willing to overwrite. Transfer files to the drive. The
files will appear to transfer to the drive. Thereafter, unmount the drive and remount the drive. The files
that you wrote to the drive should not appear after the drive is remounted. If they do appear, there is a
problem with your Forensic Device, and you should contact our support department for further
instructions.

CRU-WiebeTech
F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 3 -
1. Pre-Installation Steps
1.1 Forensic ComboDock v4 Accessories
Check the accessories with your Forensic ComboDock. Please contact WiebeTech if any items are missing or
damaged. The box should contain:
1.2 Identifying Parts
Take a moment to familiarize yourself with the parts of your new DriveDock. This will aid you in the
remaining steps.
FCDKv4
Forensic ComboDock with shrouded IDE connector 1
AC adapter & power cord 1
FireWire 800 cable 1
USB cable 1
Screws (4) & Bumpers (6) pack 1
Manual and Warranty Information (on CD)
A
DC +12V power input from AC adapter a +12V DC power input is present
B
4-pin DC input b Dock is connected to a USB host
C
USB 2.0 mini port c Hard drive access
D
1394b (FireWire 800) ports d Dock is connected to FireWire host
E
Power Switch (On / Off) e Write-blocked and HPA/DCO detector
F
4-wire power cable (connects to drive) f +5V Power output to drive
G
IDE/PATA ribbon cable (connects to drive) g +12V Power output to drive
h
4-pin power input is present

CRU-WiebeTech
F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 4 -
2. Using Forensic ComboDock v4
2.1 Attach a Bottom Plate
Attach the metal bottom plate to your 3.5-inch hard drive. This step is optional but recommended.
The purpose of the bottom plate is to provide protection to your drive electronics and aid heat dissipation.
Attach the bottom plate to your drive using the four screws supplied. Attach a rubber bumper to each
corner. Extra bottom plates are available from WiebeTech.
2.2 Jumper Configuration for 3.5-inch IDE/PATA HDD
Configure the jumpers on your hard drive. IDE/PATA drives must be set to the Master setting. The
specific method differs between manufacturers, so consult the instructions for your drive (some drives
display configuration information on the drive’s label). A few drives have both “Master with Slave
Present” and “Master without Slave” options. Choose the latter in this case. In rare cases, if the Master
setting does not work then try Cable Select.
2.3 Forensic ComboDock v4 Host Connections
Connect the FireWire or USB cable from your computer into the appropriate port on the dock.
USB FireWire 800
(Example)
IDE/PATA interface Jumper
Pins
Power
Rear of hard drive

CRU-WiebeTech
F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 5 -
Note: Forensic ComboDock v4’s HPA/DCO detection can be seen with a fast
blink of the forensic write-blocked LED (4 blinks per second). If the LED
does not blink it is reporting that the drive is write-blocked, but there is not an
HPA or DCO on the drive. If there is a slow blink it is reporting that there is
an error on the HPA or DCO (1 blink per second).
Note: The ComboDock may use any 12V
regulated switching power supply capable of
supplying 2A or greater. Do not use an
unregulated adapter, as damage may occur to
the Dock or the attached drive.
2.4 Hard Drive Attachment
2.4.1 IDE/PATA: 3.5-inch
Attach the free end of the IDE/PATA ribbon cable to the back of the
hard drive. The connector is keyed to insert only one way. The
IDE/PATA pins on the hard drive are fragile, so be very careful
when inserting or removing the IDE/PATA connector. Attach the 4-
pin power connector from the dock into the back of the hard drive.
As with the IDE/PATA cable, the power connector will only fit one
way.
2.5 Forensic ComboDock v4 Power Connections
Connect power to the dock. There are two options. The most common usage is to plug in the AC
adapter. When the adapter is connected, the LED labeled “+12” will illuminate. Alternatively, you may
supply power through a standard 4-pin Molex connector from the
computer’s internal PSU. This option makes it easy to access a
drive still mounted inside a computer case. When power is
connected in this way, the LED labeled “4 PIN” will illuminate.
Your dock is now ready to use! Turn on the power by moving the power switch toward the side labeled
“|”. When power is on, the output LEDs “+12” and “+5” will illuminate to show that power is going to the
hard drive.
The red LED access indicator will light briefly after the unit is powered up, indicating that the FireWire
bridge has successfully established communication with the drive. Thereafter, it will light whenever the
drive is accessed. Irregular flickering of the drive access light is normal.
2.6 Using Forensic ComboDock v4 with WiebeTech’s v4 Combo
Adapters
Combo Adapters are available from WiebeTech that can allow your
Forensic UltraDock to access all kinds of drives. Follow these three
simple steps to use a Combo Adapter with your dock:
1. Attach the dock’s 4-wire power connector to the adapter.
2. Connect the dock’s IDE ribbon cable to the adapter’s IDE pins.
3. Connect the drive to the adapter.
You are now ready to use your dock to access the drive. Combo
Adapters are available for SATA drives, notebook drives, microdrives,
ZIF drives, and more. See the WiebeTech website for more details (www.wiebetech.com).

CRU-WiebeTech
F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 6 -
(Windows XP)
3. Usage with Mac and Windows Operating Systems
3.1 Usage with Macintosh Computers
3.1.1 Compatibility
The Forensic ComboDock v4 is Plug-and-Play compatible under Mac OS 9.2 and OS X. No drivers are
needed. FireWire 800 ports are FireWire 400 host compatible (a FireWire 800-400 cable or adapter such
as WiebeTech’s Cable-11 is necessary for use with FireWire 400 ports). The USB2 port is USB 1.1
compatible.
3.1.2 Using Volumes
Assuming the drive format is recognizable by Mac OS, an icon representing the
drive’s volume will appear (mount) on the desktop. You can begin using the volume
right away, without any possibility of changing the data on the drive.
Eject the volume before powering down the unit by dragging the volume’s icon to
the trash bin, or by selecting the volume then pressing Command-E. Shutting down
the unit without first ejecting the volume can result in data loss.
3.2 Usage with Windows Operating System
3.2.1 Compatibility
The Forensic ComboDock v4 is Plug-and-Play compatible with Windows XP. No drivers are needed.
FireWire 800 ports are FireWire 400 host compatible (a FireWire 800-400 cable or adapter such as
WiebeTech’s Cable-11 is necessary for use with FireWire 400 ports). The USB2 port is USB 1.1
compatible.
3.2.2 Using Volumes
Assuming the drive format is recognizable by Windows, you can begin using the volume right away.
When the dock and drive are properly connected and turned on, a window may open to allow you access
to the volume. If no window appears, you can find the volume by double-clicking the “My Computer” icon.
Eject the dock before powering it down by single-clicking the green arrow icon on
the task bar, then selecting “Safely remove….” Windows will indicate when it is
safe to disconnect the dock. Shutting down the unit without first ejecting the
volume can result in data loss.
4. Frequently Asked Questions (FAQ)
Q: What are HPA and DCO?
A: A Host Protected Area (HPA) and Device Configuration Overlay (DCO) are reserved areas on a hard
drive that are no accessible by the BIOS or OS. Data can be hidden behind an HPA or DCO. Forensic
UltraDock v4 will alert you if there is an HPA or DCO so that you are aware of it and can take the
necessary steps to retrieve the hidden data.
Forensic UltraDock v4’s write-blocked LED will blink if a drive with an HPA or DCO is connected. If the
drive does not have an HPA or DCO then the LED will light solid.
Q: If I daisy-chain another FireWire device to my forensic dock, will it also be write-blocked by the dock?
A: No. The write-blocking only affects drives connected to the dock, not host connections. The second
FireWire device will be read/write (unless it employs write-blocking of its own). One possible use for this
port is the connection of a standard read/write dock for the target drive. That way, you can copy data from
the write-blocked source drive to the target drive while only using a single FireWire port on your computer.

CRU-WiebeTech
F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 7 -
Note: Data speeds in this configuration may be slightly slower than if you provide a separate FireWire
channel for each device.
Q: How should I set my hard drive jumper settings?
A: Note: This is only necessary for IDE/PATA drives (the type of drive that has a 40-pin data interface).
Try the MASTER setting first. This is the recommended setting for most WiebeTech products. Some hard
drives have two different MASTER settings: one for when there is a SLAVE drive present and one for
when there is NO SLAVE drive present. Choose the setting for NO SLAVE present. There may be some
drives that will not work with either of these settings. The next choice is CABLE SELECT. If this does not
work, try using NO jumpers. This may be the same as MASTER with NO SLAVE present.
If you're unsure how to change the jumper configuration, check the manual that came with your hard
drive, or the manufacturer's website. Some drives also have the information printed on the label.
Q: I lost my AC adapter. Where can I get a replacement?
A: The AC adapters for all current WiebeTech products (and most discontinued products) are available
for purchase on our website.
Third party AC adapters can also be used with WiebeTech products as long as they have REGULATED
POWER. Be sure to check with the manufacturer of the adapter for this specification. Also check to make
sure the volts and amps are correct for the product, as well as the pin configuration (for DIN connectors).
Q: Why does my dock experience errors or unmount during long file transfers?
A: The environment in which the dock is used can affect its performance. The surface that the dock and
drive are set upon may not allow heat to dissipate away from the units. The bottom plate supplied with the
product will help to dissipate heat away from the hard drive and dock. If placed on a non-conductive
surface, the drive or dock may suffer heat related failures. After cooling, the units usually return to a
useable state. Occasionally these heat related failures can be permanent.
Q: Why does Disk Utility show S.M.A.R.T. information as "not supported" for my external drive? I know
the drive supports this technology.
A: Even if a drive is S.M.A.R.T. enabled, external FireWire enclosures cannot pass S.M.A.R.T.
information to the host because this information is lost when the data is translated from the IDE protocol
to FireWire.
Enclosures that connect via eSATA usually pass S.M.A.R.T. data unless the enclosure combines more
than one drive into a hardware RAID. However, the eSATA host in the computer may or may not support
S.M.A.R.T. Check the card manufacturer's website for this specification.
Q: Why won't the computer let me eject or unmount my drive?
A: There may be a software application running in the background with an active link to the drive.
Sometimes, you may see a message such as "The disk is in use and could not be ejected. Try quitting
applications and try again."
It could be a background application like Sherlock or the Finder. This is not a defect or issue caused by
the WiebeTech device. Try invoking the Force Quit feature in OS X to see what software may be running.
For Windows XP, the equivalent command is CTRL-SHIFT-ESC.
Drives connected to the computer via eSATA cannot be ejected in Windows the way FireWire drives can.
However, freeware utilities are available on the internet that provide a similar function.

CRU-WiebeTech
F o re ns i c C om b oD oc k v 4 U se r ’s M a nu a l - 8 -
Technical Specifications
Product Code
Forensic ComboDock v4 (31300-2103-0000)
Interface
FireWire 800 using OXFW922 (backwards compatible with FireWire 400)
USB 2.0
Bridge Type: UF922
External Power Supply
100-240VAC +12V / 3A (included)
Power Input (+12V): +12V DC Jack
(+12V / +5V): Standard disk drive 4-pin Molex power jack
Power Output
+12V / +5V
Power Switch
On / Off
HPA/DCO Detection
Yes
Host Indicators FireWire host attached LED
USB host attached LED
Access Indicator
Provides visual indication of hard drive activity
Write Block
I
ndicator
Indicates write-blocked operation
Power Indicators Input: indicates presence of either AC power or 4-wire Molex power
Output: shows presence of +12V and +5V output to the drive
Operating Temperature
50 – 85°Fahrenheit (10 – 30°Celsius)
Operating Humidity
5% to 95%, noncondensing
Compatibility 3.5 inch IDE drives
(Other drive types can be connected when used with optional Combo Adapters.)
Operating System
Windows XP, Vista
Mac OS X
Linux distributions supporting FireWire
Shipping Weight
3 pounds, including AC adapter
Dimensions 3.2” x 2.2” x 0.95” (81mm x 56mm x 24mm)
Dimensions are exclusive of attached plates, drives, and cables.
Warranty
2-year limited warranty. See warranty statement for details and limitations.
WiebeTech offers free phone support for 90 days after purchase (1-866-744-8722).
After 90 days, email support is available at [e-mail].
Forensic ComboDock is a trademark of CRU-DataPort. Other marks are the property of their respective owners.
© 2008 CRU-DataPort. All rights reserved.
FCC Compliance Statement: “This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This
device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired
operation.”
In the event that you experience Radio Frequency Interference, you should take the following steps to resolve the problem:
1) Ensure that the bottom plate and case of your attached drive is grounded, either to the DriveDock case or to an Earth ground.
2) Use a FireWire cable with RFI reducing ferrites on each end.
3) Use a power supply with an RFI reducing ferrite approximately 5 inches from the DC plug.
If you have any questions or problems, please contact [e-mail] for technical support. If you are interested in purchasing more
WiebeTech products, check our website or contact [e-mail]. We appreciate being able to serve you!
Note: This version of the ComboDock does not support CD/DVD drives. You may contact support for additional information.
Tested to comply
with FCC standards
FOR HOME OR OFFICE USE