Abstract: Method and apparatus for implementing data security and privacy for a processing device. In some embodiments, the processing device is authenticated using a trusted authority. Self-authentication information is stored in a keystore of the processing device as a result of the authentication. The processing device subsequently operates in an untrusted mode by performing self-authentications using the self-authentication information in the keystore without further reference to the trusted authority. The trusted authority can be a remote server with which the processing device communicates over a network. The processing device can subsequently transition to a trust mode in which all authentications take place with the trusted authority without reference to the keystore. The processing device can be a data storage device such as a solid-state drive (SSD), a hard disc drive (HDD) or a hybrid drive (HDSD). The processing device can use untrust mode during manufacturing, and trust mode during field use.