SafeGuard OpalReqCheck tool: Frequently asked questions

  • Article ID: 120985
  • Rating:
  • 1 customers rated this article 3.0 out of 6
  • Updated: 06 Jan 2015

This article provides information on the Sophos SafeGuard OpalReqCheck.exe tool.


  • We only support fully compliant Opal 1.0 drives. Opal 2.0 drives are supported if they are backwards compatible and fully compliant with Opal 1.0. 
  • The reason is that the Opal specification was not adhered to by most hard disk drive manufacturers. We implemented the ability to function alongside a drive that adheres to the 1.0 standard. If this standard is not followed, we cannot guarantee compatibility.
  • You may wish to investigate a non-self encrypting drives to clarify if the level of software encryption of SafeGuard meets your security requirements.
  • Every effort has been made to support Opal drives, however, real-world testing has shown that Opal drives and SafeGuard Device Encryption together may cause problems.

Applies to the following Sophos product(s) and version(s)
SafeGuard Device Encryption

What is the OpalReqCheck tool?

The tool has been designed to provide quicker feedback to you as to whether or not a particular drive will likely NOT work with Sophos SafeGuard (not whether it will work). It is used to generically check a drive’s parameters and basic compatibility.

When running the tool, if the test comes back with a failure it is likely an unsupported drive. If it comes back okay, it still may be unsupported. 

Why does one disk drive pass but a second, of the same make and model, fail?

Firmware differences along with inconsistencies in manufacturing can alter the drive enough for seemingly identical drives to have different test results.

How do I get hold of the tool?

SGN version Tool
6.1 / 7.0

How do I run OpalReqCheck.exe?

On the computer which is to have its disk drive tested:

Identify the physical disk ID

  1. Open a command prompt (Start | Run | Type: cmd.exe | Press return).
  2. Type: wmic diskdrive list brief
  3. Make a note of the 'DeviceID' value for the drive you intend to encrypt. Commonly this value is PhysicalDrive0 though the number on the end could be 1, 2, etc.  Example:

Run the OpalReqCheck tool with the drive's device ID

  1. Save the zip file to the Desktop of the local computer which is to have its drive tested.
  2. Extract the OpalReqCheck.exe file from the zip file.
  3. Open a command prompt (Start | Run | Type: cmd.exe | Press return).
    Note:  If UAC is enabled open a command prompt as an administrator.
  4. Change directory to Desktop of the computer.
  5. Run the tool with the parameter recorded in step C above. Example:

    OpalReqCheck.exe physicaldrive0

    The tool will output whether the drive is supported or not. In the above example the tool has detected that the drive is not an Opal drive.


Related KBA:

If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent