We want do have a feature within DriveLock Device control
to whitelist CDROM/DVD media (not the device).
We believe this can be implemented in future with the help
of the DriveLock volume.id feature for SD card readers,
which ignores the real vendor and product of a card reader,
when a proper secure and different volume identification exist.

For CD media such an volume identification file can not be
written afterwards to the CD or DVD.

But how about to read the "volume label" first few chars to
create a "Vendor String" and create a Hash from the entire
drive for a "serial number" instead ?

If the "cdromhash" feature is enabled within a policy, similar
like enabeling "volume.id" for SD cards, then for CD drive types
this pseudo vid/pid might be possible to create, to be able to
whitelist a single media, instead of the entire (real) device.