Tableau TD2u, User Manual

Page 1: ...USER GUIDE Tableau TD2u Version 1 3...

Page 2: ...e Any use and duplication of this work is subject to the terms of the license agreement between you and Guidance Software Inc Except as stated in the license agreement or as otherwise permitted under...

Page 3: ...ER 1 Overview 9 Tableau TD2u 11 TD2u Kit Contents 11 Navigating the TD2u 14 Reading the LEDs 15 USB Keyboard Support 15 CHAPTER 2 Setting up the TD2u 17 Startup Sequence 19 Initialization 19 Configuri...

Page 4: ...tions Checking 38 Wipe Disk Menu 2 41 Single Pass Wipe 42 Multi Pass Wipe 42 Secure Erase 42 Encryption Menu 3 43 Encrypt New Destination Menu 3 1 43 Unlock Destinations Menu 3 2 44 Change Dest Passwo...

Page 5: ...oubleshooting and Support 59 Troubleshooting Common Problems 61 Power Supply Issues 61 Problems with Disk Detection 61 Problems with Encrypted Drives 63 Replacing the Backup Battery for the Real time...

Page 6: ...vi...

Page 7: ...u Conventions Used in this Guide The TD2u has two soft keys placed immediately under the LCD display The bottom line of the display shows text indicating the current function for each of the two soft...

Page 8: ...GB hard disk stores up to 4 000 000 000 bytes a hard disk with a 150 MB sec transfer rate transfers 150 000 000 bytes per second Note For a complete list of changes for a given TD2u firmware release s...

Page 9: ...CHAPTER 1 OVERVIEW Tableau TD2u 11 TD2u Kit Contents 11 Navigating the TD2u 14 Reading the LEDs 15 USB Keyboard Support 15...

Page 10: ...10 Tableau TD2u User Guide Version 1 3 0...

Page 11: ...SATA and IDE hard disks from the source interface l Parallel duplication to two SATA and one USB 3 0 destination hard disks l Parallel image and clone duplication l Optional destination disk encrypti...

Page 12: ...tages worldwide TP5 LC US North America shipments include the TP5 LC US AC line cord for use with the TP5 NC power supply When shipped to other geographic markets the local reseller typically adds an...

Page 13: ...8 IDE cable to connect notebook drive adapters to the TD2u Use the shorter TC6 2 IDE cable shown with the TKA5 AD adapter pack below TC8 USB 2 0 cable Used to con nect the TD2u to a host com puter for...

Page 14: ...e soft keys might also serve to select items like Cancel and Ok The center button on the arrow keypad also serves as a Select button when navigating among TD2u menus It cannot be used to start major t...

Page 15: ...the destination drives are connected to the right side A yellow Alert LED on the right flashes to indicate the need for user intervention USB Keyboard Support You can connect a standard USB keyboard...

Page 16: ...16 Tableau TD2u User Guide Version 1 3 0...

Page 17: ...itialization 19 Configuring the TD2u 19 User Selected Startup Mode 19 System Settings Menu 7 1 20 Set Examiner Name Menu 7 1 2 21 Imaging Setup Menu 7 2 22 Factory Reset Menu 7 3 26 Duplicator Info Me...

Page 18: ...18 Tableau TD2u User Guide Version 1 3 0...

Page 19: ...mode The TD2u stores these settings in non volatile flash memory for use at each startup The startup mode feature lets you customize the TD2u for a specific workflow The Startup Mode setting provides...

Page 20: ...r Name Alphanumeric NA The Examiner Name option lets you set or change the name of the examiner or user of the TD2u This information appears in each log recor ded by the TD2u Alphabetic names can be e...

Page 21: ...row keys to change the value in each field Once you have set the desired date and time press the Save soft key to record your changes Finished Alert Off On Off When On the TD2u flashes the yellow Aler...

Page 22: ...e display capital letters is selected For capital letters lowercase letters and numbers use the Up and Down buttons to scroll through characters Press the center button on the keypad to select a chara...

Page 23: ...e a Raw DD file or if the user should be prompted at exe cution time File Size 4GB 2GB 1GB 700MB UNLIMITED 2GB Size of an individual image file generated during Disk to File duplication operation E01...

Page 24: ...p When set to Prompt the TD2u prompts the user to enter Case Notes When set to Skip Case Notes are suppressed in subsequent logs Error Recov ery Standard Exhaustive Standard The TD2u supports two diff...

Page 25: ...inal pass of random data For some SATA solid state destinations Secure Erase is a very fast wipe provided by the drive manufacturer Restore to Defaults N A N A Resets the above options to the factory...

Page 26: ...hashes for the duplication The TD2u treats all media errors on a destination disk as fatal or unrecoverable errors because each destination disk is receiving a copy of evidence critical to a forensic...

Page 27: ...Build Time 14 31 22 The build time of the TD2u firmware release Build Date Nov 28 2017 The build data of the TD2u firmware release Connecting Hard Drives Viewing the front of the TD2u the source driv...

Page 28: ...Tableau TCUSB3 18 cable 3 Connect the source disk with its power cable to the left side TD2u power input o TC2 8 R2 IDE SATA drive power cable o TC5 8 R2 SATA drive power cable 4 Connect the destinati...

Page 29: ...on SATA disks to the TD2u The TD2u can write to two destination drives simultaneously To create a single copy connect a drive to either the Dest 1 or USB destination port Drive Detection After initial...

Page 30: ...30 Tableau TD2u User Guide Version 1 3 0...

Page 31: ...d Options 33 Duplicate Menu 1 36 Preconditions Checking 38 Wipe Disk Menu 2 41 Encryption Menu 3 43 Disk Information Menu 4 45 Disk Utilities Menu 5 47 Status Information 50 Logs Menu Menu 6 52 Resett...

Page 32: ...32 Tableau TD2u User Guide Version 1 3 0...

Page 33: ...of the tree is numbered to guide you as you navigate the menu tree These numbers also make it easy to refer back to this guide for detailed information The following outline provides the menu structur...

Page 34: ...lities 5 1 Format 5 1 1 Format Destination 5 1 2 Format Accessory 5 2 Hash 5 3 Blank Check 5 4 HPA DCO Removal 6 Logs 6 1 View Logs 6 2 Save All Logs 6 3 Delete All Logs 6 4 Print All Logs 34 Tableau...

Page 35: ...ging Setup 7 2 1 File Type 7 2 2 File Size 7 2 3 E01 EX01 Compression 7 2 4 Directory Name 7 2 5 Custom Filename 7 2 6 Raw File Ext 7 2 7 Case ID 7 2 8 Case Notes 7 2 0 Error Recovery 7 2 10 Error Ret...

Page 36: ...distinct sub menus Selecting the Duplicate item will launch a Duplicate job setup page that allows for in line selection of clone or image for all connected destination drives This allows each destin...

Page 37: ...detailed information press the Details soft key The TD2u provides a high degree of flexibility in selecting defaults for each field so that you can configure the TD2u to match your desired workflow De...

Page 38: ...e option and may also be specified under the Setup Imaging Options menu When creating a DD image you can also specify DMG naming for files DMG refers to a file naming convention used by Apple operatin...

Page 39: ...using the Disk Util ities option under the Main menu Source Fits into Destin ation Both Fatal Warning For Clone destinations the destination disk must be at least as large as the source disk For Image...

Page 40: ...s not mean that the source is neces sarily blank but it could mean that the source has been partially wiped or that an ATA password has been set for the source drive Destination Blank Clone Warning Th...

Page 41: ...at one during duplication If the destination disk appears to be blank the TD2u formats it without any warnings Encrypted Destinations Unlocked Both Warning The TD2u checks if any of the destinations a...

Page 42: ...larger or slower disks Single Pass Wipe The TD2u writes a constant pattern of zeros 00h to the destination drive in a single pass The TD2u will display on screen performance and timing metrics during...

Page 43: ...source program VeraCrypt can read disks encrypted by TD2u However drives encrypted first by VeraCrypt likely cannot be used by TD2u without re encryption See the Guidance Software website for more inf...

Page 44: ...tly lost See the Guidance Software website for more information on the methods and algorithms used for TD2u encryption Securely encrypting destinations takes 15 to 20 seconds Unlock Destinations Menu...

Page 45: ...oes not change the encryption across the drive Generating a new secure header takes 15 to 20 seconds Disk Information Menu 4 The TD2u can display detailed information about the source or the destinati...

Page 46: ...patible with the Unlock Drive feature nor with most third party tools like VeraCrypt See Troubleshooting Common Problems on page 61 for additional details on how to recover previously encrypted data f...

Page 47: ...pro tect the contents of the hard disk Disk Utilities Menu 5 The TD2u offers several utilities to assist with the processing of drives These utilities can be found in Menu 5 Format Menu 5 1 When using...

Page 48: ...y write cycles can severely degrade performance The TD2u recognizes AF disks It formats them accordingly with partitions and clusters positioned at sector locations that are a multiple of 8 Format Des...

Page 49: ...he Hash Utilities you should get the same hash results When the hashing operation is finished the TD2u screen displays the hash results Blank Check Menu 5 3 The Blank Check menu lets you do a quick bl...

Page 50: ...he source side of the duplicator It is not however possible to disable DCO without making a permanent modification to the hard disk For this reason the TD2u will not automatically disable DCO on the s...

Page 51: ...s per second minute Current Rate xxx MB unit The average transfer rate over the last five seconds Elapsed Time Elapsed Time min sec Total elapsed time since the start of the current task Time Remainin...

Page 52: ...ates a log entry to record that operation The TD2u has an internal flash memory with the capacity to store approximately 59 of the most recently logged operations Once the TD2u has stored 59 log entri...

Page 53: ...of the line is a symbol indicating the result of the logged operation Result Definition Task completed normally Task did not completely normally Task canceled Sample TD2u Log The TD2u maintains detail...

Page 54: ...apacity in Bytes 2 000 398 934 016 2 0 TB Block Size 512 bytes Block Count 3 907 029 168 Power ON Block Count 3 907 029 168 HPA In Use No HPA Block Count 3 907 029 168 DCO In Use No DCO Block Count 3...

Page 55: ...gs option to save the logs Logs are saved in an ASCII text format Use any text editor to view the logs Writing Logs to a USB Storage Device The TD2u lets you write logs to a USB storage device and adh...

Page 56: ...non volatile memory is a separate flash device used to store two different types of information configuration settings and logs Configuration settings include the following l User operator name entere...

Page 57: ...wing table lists the reset clear information stored internally by the TD2u Non Volatile Memory Information Stored User or Case Spe cific Info Ability to Reset Clear Flash 1 TD2u firmware None Firmware...

Page 58: ...Setup Case Info Options TD2u logs User specific and Case specific All logs can be erased by either select ing Logs Erase Logs or Setup Fact ory Reset Alternately logs can be erased individually When v...

Page 59: ...CHAPTER 4 TROUBLESHOOTING AND SUPPORT Troubleshooting Common Problems 61 Replacing the Backup Battery for the Real time Clock 64...

Page 60: ...60 Tableau TD2u User Guide Version 1 3 0...

Page 61: ...ctor If the TP5 power supply is connected properly to the TD2u and to AC power the green LED illuminates If you are having difficulty turning the TD2u on check the status of the DC power LED to ensure...

Page 62: ...ted to the notebook drive adapter TD2u does not detect ZIF style notebook IDE hard disk There are several models of ZIF hard disks When using the TDA5 ZIF kit provided with the TD2u refer to the Suppo...

Page 63: ...firmware includes a Legacy Unlock feature If you have such a drive the following procedure will allow for recapture of the previous evidence 1 Update your TD2u to version 1 3 or newer 2 Connect the e...

Page 64: ...Model Duracell DL1220 Energizer CR1220 Rayovac CR1220 Replacing the Battery It is necessary to open the TD2u case in order to replace the battery You need a 1 Phillips screwdriver to open the TD2u cas...

Page 65: ...f the case when the bottom is removed 5 The fan used in the TD2u is attached to the lower half of the plastic case Carefully lift the lower half of the case away from you 6 Set the TD2u on a flat surf...

Page 66: ...The backup battery is near the heatsink as shown in the photograph below 7 Using the flat blade screwdriver gently pry the battery from the battery holder 66 Tableau TD2u User Guide Version 1 3 0...

Page 67: ...CB o Ensure that the case and main circuit board are aligned and replace the four case screws The four screws that hold the TD2u case together also secure the main cir cuit board o After replacing the...

Page 68: ...detailed information about setting the date and time see System Settings Menu 7 1 on page 20 After resetting the date time turn the TD2u off wait two minutes and turn the TD2u on The date time locate...

Page 69: ...ment Con ventions 7 Disk Information Menu 4 45 Disk Utilities Menu 5 47 Drive Detection 29 Duplicate 36 Duplicator Info Menu 8 26 E EnScript 2 Error Recovery Modes 25 F Factory Reset Menu 7 3 26 Forma...

Page 70: ...the Real time Clock 64 Replacing the Battery 64 Resetting and Clearing Internally Stored Information 56 S Sample TD2u Log 53 Save All Logs Menu 6 2 55 Secure Erase 42 Set Examiner Name Menu 7 1 2 21 S...

Page 71: ...U USB Keyboard Support 15 User Selected Startup Mode 19 Using the TD2u 31 V View Logs Menu 5 1 52 W Wipe Disk Menu 2 41 Writing Logs to a USB Storage Device 55...