Opal Lock - Fidelity Height - 2026 Pricing, Features, Reviews & Alternatives

Opal Lock - Fidelity Height is a Windows desktop application that activates and manages the hardware encryption engine built into compatible TCG Opal 1.0, Opal 2.0, Pyrite 1.0, and Pyrite 2.0 self-encrypting drives (SEDs). It does not add software encryption to standard drives; instead, it gives users and IT administrators direct control over the encryption controller already present inside a compatible SATA, NVMe, or USB drive. Core operations include drive setup and admin password configuration, lock and unlock management, pre-boot authentication, cryptographic erase, and audit log access. The application runs on Windows 10, Windows 11, and Windows Server 2019 and 2022, deployed locally with no cloud or web-based component. Four tiered editions, Lite, USB, Standard, and Premium, allow organizations to match license scope to their drive environment and operational requirements.

Opal Lock - Fidelity Height targets a broad range of users: individuals securing files on a single laptop or USB drive, professionals in legal, healthcare, and financial services handling sensitive data, IT administrators managing enterprise storage fleets, managed service providers (MSPs) overseeing devices across multiple locations, and hardware manufacturers seeking OEM licensing to pre-install the application on systems shipping with Opal SEDs. Standard and Premium editions add pre-boot authentication via Shadow MBR or a bootable recovery USB, enabling a system drive to be unlocked before the OS loads. The Premium edition extends this further with multi-drive batch operations, a second limited-authority user password, and USB-based password authentication for automatic unlock on drive insertion.

Compliance and audit capabilities are built directly into the drive hardware rather than the host system. The on-board audit log persists through OS wipes and system replacements, supporting incident response and regulatory review. Instant Secure Erase and cryptographic erase permanently destroy the encryption key, rendering all data unrecoverable, and a Certificate of Sanitization is generated automatically after a successful erase to satisfy documentation requirements under frameworks such as GDPR and HIPAA. A background service monitors drive insert and removal events automatically, and a battery level check before setup prevents data loss from mid-setup power interruption.