WiebeTech FCDKV4, Forensic ComboDock v4 User Manual

Page 1
Forensic ComboDock™ v4
USER’S MANUAL
Revised December 30, 2008
Features
Portable and rugged write-blocked solutions to image drives in the field – WiebeTech's proprietary write­blocking technology offers easy read-only access to suspect hard drives through high speed FireWire 800 (400 compatible) interfaces.
Now with HPA/DCO detection. Forensic ComboDock v4 will recognize and report the presence of an HPA or DCO on a hard drive.
Retrieve data from 3.5" IDE drives through FireWire 800 (400 compatible) or USB 2.0 – Forensic ComboDock is the best solution for accessing data from suspect 3.5" IDE drives. With two FireWire ports, it's daisy-chainable for more versatility.
Multiple status indicators – show power input/output status, hard drive access, host attachment, and write-blocking status.
Rugged design, built to last – Grab it and go! Forensic ComboDock is tough as nails and made to last. The small and rugged case contains a complete, high speed Oxford Semiconductor OXFW922 bridge and is constructed from briefcase-tough aluminum for durability. World-compatible AC adapter accepts 100-240VAC so you can trot the globe.
Connect even more types of drives with Combo Adapters -- Use ComboDock in conjunction with our lineup of Combo Adapters and retrieve data on other drive types such as 1.8" Toshiba (found in iPods),
1.8" Hitachi drives, MicroDrives (found in iPod mini), PCMCIA drives, 2.5" notebook drives and SATA drives. See www.wiebetech.com for more information.
F o r ensic ComboD o c k v 4 U s e r ’ s M a n u a l - 1 -
Page 2
CRU-WiebeTech
Table of Contents
1. Pre-Installation Steps 3
1.1 Forensic ComboDock v4 Accessories 3
1.2 Identifying Parts 3
2. Using Forensic ComboDock v4 4
2.1 Attach a Bottom Plate 4
2.2 Jumper Configuration for 3.5-inch IDE/PATA HDD 4
2.3 Forensic ComboDock v4 Host Connections 4
2.4 Hard Drive Attachment 5
2.4.1 IDE/PATA: 3.5-inch 5
2.5 Forensic ComboDock v4 Power Connections 5
2.6 Using Forensic ComboDock v4 with WiebeTech’s v4 Combo Adapters 5
3. Usage with Mac and Windows Operating Systems 6
3.1 Usage with Macintosh Computers 6
3.1.1 Compatibility 6
3.1.2 Using Volumes 6
3.2 Usage with Windows Operating System 6
3.2.1 Compatibility 6
3.2.2 Using Volumes 6
4. Frequently Asked Questions (FAQ) 6
5. Technical Specifications 8
Forensic Device User Advisory
We recommend that you perform a final check on this product.
Prior to first use, please verify that the write-blocking function of this product is working properly. This is easily done: attach a known good formatted drive, and verify that the drive mounts properly on your computer. Use a drive that has data on it that you are willing to overwrite. Transfer files to the drive. The files will appear to transfer to the drive. Thereafter, unmount the drive and remount the drive. The files that you wrote to the drive should not appear after the drive is remounted. If they do appear, there is a problem with your Forensic Device, and you should contact our support department for further instructions.
F o r e n s i c C o m b o D o c k v 4 U s e r ’ s M a n u a l - 2 -
Page 3
CRU-WiebeTech
FCDKv4
1. Pre-Installation Steps
1.1 Forensic ComboDock v4 Accessories
Check the accessories with your Forensic ComboDock. Please contact WiebeTech if any items are missing or
damaged. The box should contain:
Forensic ComboDock with shrouded IDE connector 1 AC adapter & power cord 1 FireWire 800 cable 1 USB cable 1 Screws (4) & Bumpers (6) pack 1 Manual and Warranty Information (on CD)
1.2 Identifying Parts
Take a moment to familiarize yourself with the parts of your new DriveDock. This will aid you in the remaining steps.
DC +12V power input from AC adapter
A
4-pin DC input
B
USB 2.0 mini port
C
1394b (FireWire 800) ports
D
Power Switch (On / Off)
E
4-wire power cable (connects to drive)
F
IDE/PATA ribbon cable (connects to drive)
G
+12V DC power input is present
a
Dock is connected to a USB host
b
Hard drive access
c
Dock is connected to FireWire host
d
Write-blocked and HPA/DCO detector
e
+5V Power output to drive
f
+12V Power output to drive
g
4-pin power input is present
h
F o r e n s i c C o m b o D o c k v 4 U s e r ’ s M a n u a l - 3 -
Page 4
CRU-WiebeTech
2. Using Forensic ComboDock v4
2.1 Attach a Bottom Plate
Attach the metal bottom plate to your 3.5-inch hard drive. This step is optional but recommended.
The purpose of the bottom plate is to provide protection to your drive electronics and aid heat dissipation. Attach the bottom plate to your drive using the four screws supplied. Attach a rubber bumper to each corner. Extra bottom plates are available from WiebeTech.
2.2 Jumper Configuration for 3.5-inch IDE/PATA HDD
Configure the jumpers on your hard drive. IDE/PATA drives must be set to the Master setting. The
specific method differs between manufacturers, so consult the instructions for your drive (some drives display configuration information on the drive’s label). A few drives have both “Master with Slave Present” and “Master without Slave” options. Choose the latter in this case. In rare cases, if the Master setting does not work then try Cable Select.
IDE/PATA interface
Jumper
Pins
Power
2.3 Forensic ComboDock v4 Host Connections
Connect the FireWire or USB cable from your computer into the appropriate port on the dock.
USB FireWire 800
(Example)
F o r e n s i c C o m b o D o c k v 4 U s e r ’ s M a n u a l - 4 -
Page 5
CRU-WiebeTech
2.4 Hard Drive Attachment
2.4.1 IDE/PATA: 3.5-inch
Attach the free end of the IDE/PATA ribbon cable to the back of the hard drive. The connector is keyed to insert only one way. The IDE/PATA pins on the hard drive are fragile, so be very careful when inserting or removing the IDE/PATA connector. Attach the 4­pin power connector from the dock into the back of the hard drive. As with the IDE/PATA cable, the power connector will only fit one way.
Note: Forensic ComboDock v4’s HPA/DCO detection can be seen with a fast blink of the forensic write-blocked LED (4 blinks per second). If the LED does not blink it is reporting that the drive is write-blocked, but there is not an HPA or DCO on the drive. If there is a slow blink it is reporting that there is an error on the HPA or DCO (1 blink per second).
2.5 Forensic ComboDock v4 Power Connections
Connect power to the dock. There are two options. The most common usage is to plug in the AC adapter. When the adapter is connected, the LED labeled “+12” will illuminate. Alternatively, you may supply power through a standard 4-pin Molex connector from the computer’s internal PSU. This option makes it easy to access a drive still mounted inside a computer case. When power is connected in this way, the LED labeled “4 PIN” will illuminate.
Note: The ComboDock may use any 12V regulated switching power supply capable of supplying 2A or greater. Do not use an unregulated adapter, as damage may occur to
Your dock is now ready to use! Turn on the power by moving the power switch toward the side labeled “|”. When power is on, the output LEDs “+12” and “+5” will illuminate to show that power is going to the hard drive.
The red LED access indicator will light briefly after the unit is powered up, indicating that the FireWire bridge has successfully established communication with the drive. Thereafter, it will light whenever the drive is accessed. Irregular flickering of the drive access light is normal.
2.6 Using Forensic ComboDock v4 with WiebeTech’s v4 Combo
Adapters
Combo Adapters are available from WiebeTech that can allow your Forensic UltraDock to access all kinds of drives. Follow these three simple steps to use a Combo Adapter with your dock:
1. Attach the dock’s 4-wire power connector to the adapter.
2. Connect the dock’s IDE ribbon cable to the adapter’s IDE pins.
3. Connect the drive to the adapter.
You are now ready to use your dock to access the drive. Combo Adapters are available for SATA drives, notebook drives, microdrives, ZIF drives, and more. See the WiebeTech website for more details (www.wiebetech.com).
F o r e n s i c C o m b o D o c k v 4 U s e r ’ s M a n u a l - 5 -
Page 6
CRU-WiebeTech
3. Usage with Mac and Windows Operating Systems
3.1 Usage with Macintosh Computers
3.1.1 Compatibility
The Forensic ComboDock v4 is Plug-and-Play compatible under Mac OS 9.2 and OS X. No drivers are needed. FireWire 800 ports are FireWire 400 host compatible (a FireWire 800-400 cable or adapter such as WiebeTech’s Cable-11 is necessary for use with FireWire 400 ports). The USB2 port is USB 1.1 compatible.
3.1.2 Using Volumes
Assuming the drive format is recognizable by Mac OS, an icon representing the drive’s volume will appear (mount) on the desktop. You can begin using the volume right away, without any possibility of changing the data on the drive.
Eject the volume before powering down the unit by dragging the volume’s icon to the trash bin, or by selecting the volume then pressing Command-E. Shutting down the unit without first ejecting the volume can result in data loss.
3.2 Usage with Windows Operating System
3.2.1 Compatibility
The Forensic ComboDock v4 is Plug-and-Play compatible with Windows XP. No drivers are needed. FireWire 800 ports are FireWire 400 host compatible (a FireWire 800-400 cable or adapter such as WiebeTech’s Cable-11 is necessary for use with FireWire 400 ports). The USB2 port is USB 1.1 compatible.
3.2.2 Using Volumes
Assuming the drive format is recognizable by Windows, you can begin using the volume right away. When the dock and drive are properly connected and turned on, a window may open to allow you access to the volume. If no window appears, you can find the volume by double-clicking the “My Computer” icon.
Eject the dock before powering it down by single-clicking the green arrow icon on the task bar, then selecting “Safely remove….” Windows will indicate when it is safe to disconnect the dock. Shutting down the unit without first ejecting the volume can result in data loss.
(Windows XP)
4. Frequently Asked Questions (FAQ)
Q: What are HPA and DCO? A: A Host Protected Area (HPA) and Device Configuration Overlay (DCO) are reserved areas on a hard
drive that are no accessible by the BIOS or OS. Data can be hidden behind an HPA or DCO. Forensic UltraDock v4 will alert you if there is an HPA or DCO so that you are aware of it and can take the necessary steps to retrieve the hidden data.
Forensic UltraDock v4’s write-blocked LED will blink if a drive with an HPA or DCO is connected. If the drive does not have an HPA or DCO then the LED will light solid.
Q: If I daisy-chain another FireWire device to my forensic dock, will it also be write-blocked by the dock? A: No. The write-blocking only affects drives connected to the dock, not host connections. The second
FireWire device will be read/write (unless it employs write-blocking of its own). One possible use for this port is the connection of a standard read/write dock for the target drive. That way, you can copy data from the write-blocked source drive to the target drive while only using a single FireWire port on your computer.
F o r e n s i c C o m b o D o c k v 4 U s e r ’ s M a n u a l - 6 -
Page 7
CRU-WiebeTech
Note: Data speeds in this configuration may be slightly slower than if you provide a separate FireWire channel for each device.
Q: How should I set my hard drive jumper settings? A: Note: This is only necessary for IDE/PATA drives (the type of drive that has a 40-pin data interface).
Try the MASTER setting first. This is the recommended setting for most WiebeTech products. Some hard drives have two different MASTER settings: one for when there is a SLAVE drive present and one for when there is NO SLAVE drive present. Choose the setting for NO SLAVE present. There may be some drives that will not work with either of these settings. The next choice is CABLE SELECT. If this does not work, try using NO jumpers. This may be the same as MASTER with NO SLAVE present.
If you're unsure how to change the jumper configuration, check the manual that came with your hard drive, or the manufacturer's website. Some drives also have the information printed on the label.
Q: I lost my AC adapter. Where can I get a replacement? A: The AC adapters for all current WiebeTech products (and most discontinued products) are available
for purchase on our website.
Third party AC adapters can also be used with WiebeTech products as long as they have REGULATED POWER. Be sure to check with the manufacturer of the adapter for this specification. Also check to make sure the volts and amps are correct for the product, as well as the pin configuration (for DIN connectors).
Q: Why does my dock experience errors or unmount during long file transfers? A: The environment in which the dock is used can affect its performance. The surface that the dock and
drive are set upon may not allow heat to dissipate away from the units. The bottom plate supplied with the product will help to dissipate heat away from the hard drive and dock. If placed on a non-conductive surface, the drive or dock may suffer heat related failures. After cooling, the units usually return to a useable state. Occasionally these heat related failures can be permanent.
Q: Why does Disk Utility show S.M.A.R.T. information as "not supported" for my external drive? I know
the drive supports this technology.
A: Even if a drive is S.M.A.R.T. enabled, external FireWire enclosures cannot pass S.M.A.R.T.
information to the host because this information is lost when the data is translated from the IDE protocol to FireWire.
Enclosures that connect via eSATA usually pass S.M.A.R.T. data unless the enclosure combines more than one drive into a hardware RAID. However, the eSATA host in the computer may or may not support S.M.A.R.T. Check the card manufacturer's website for this specification.
Q: Why won't the computer let me eject or unmount my drive? A: There may be a software application running in the background with an active link to the drive.
Sometimes, you may see a message such as "The disk is in use and could not be ejected. Try quitting applications and try again."
It could be a background application like Sherlock or the Finder. This is not a defect or issue caused by the WiebeTech device. Try invoking the Force Quit feature in OS X to see what software may be running. For Windows XP, the equivalent command is CTRL-SHIFT-ESC.
Drives connected to the computer via eSATA cannot be ejected in Windows the way FireWire drives can. However, freeware utilities are available on the internet that provide a similar function.
F o r e n s i c C o m b o D o c k v 4 U s e r ’ s M a n u a l - 7 -
Page 8
CRU-WiebeTech
Product Code
External Power Supply
Power Output
Power Switch
HPA/DCO Detection
Access Indicator
Write Block
I
ndicator
Operating Temperature
Operating Humidity
Shipping Weight
Technical Specifications
Forensic ComboDock v4 (31300-2103-0000) FireWire 800 using OXFW922 (backwards compatible with FireWire 400)
Interface
Power Input
Host Indicators
Power Indicators
Compatibility
Operating System
Dimensions
Warranty
Forensic ComboDock is a trademark of CRU-DataPort. Other marks are the property of their respective owners.
© 2008 CRU-DataPort. All rights reserved.
FCC Compliance Statement: “This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.”
In the event that you experience Radio Frequency Interference, you should take the following steps to resolve the problem:
1) Ensure that the bottom plate and case of your attached drive is grounded, either to the DriveDock case or to an Earth ground.
2) Use a FireWire cable with RFI reducing ferrites on each end.
3) Use a power supply with an RFI reducing ferrite approximately 5 inches from the DC plug.
If you have any questions or problems, please contact support@wiebetech.com for technical support. If you are interested in purchasing more WiebeTech products, check our website or contact sales@wiebetech.com. We appreciate being able to serve you!
Note: This version of the ComboDock does not support CD/DVD drives. You may contact support for additional information.
USB 2.0 Bridge Type: UF922
100-240VAC +12V / 3A (included) (+12V): +12V DC Jack
(+12V / +5V): Standard disk drive 4-pin Molex power jack +12V / +5V On / Off Yes FireWire host attached LED
USB host attached LED Provides visual indication of hard drive activity Indicates write-blocked operation Input: indicates presence of either AC power or 4-wire Molex power
Output: shows presence of +12V and +5V output to the drive 50 – 85° Fahrenheit (10 – 30° Celsius) 5% to 95%, noncondensing
3.5 inch IDE drives (Other drive types can be connected when used with optional Combo Adapters.) Windows XP, Vista Mac OS X Linux distributions supporting FireWire 3 pounds, including AC adapter
3.2” x 2.2” x 0.95” (81mm x 56mm x 24mm) Dimensions are exclusive of attached plates, drives, and cables. 2-year limited warranty. See warranty statement for details and limitations. WiebeTech offers free phone support for 90 days after purchase (1-866-744-8722). After 90 days, email support is available at support@wiebetech.com.
Tested to comply
with FCC standards
FOR HOME OR OFFICE USE
F o r e n s i c C o m b o D o c k v 4 U s e r ’ s M a n u a l - 8 -
Loading...