During the analysis phase of an incident, a CySA+ analyst must acquire a forensic copy of a compromised server's hard drive that may later be used as evidence in litigation. The analyst connects the source drive through a hardware device and creates a bit-for-bit copy. To later prove in court that the acquired image is identical to the original disk and has not been altered, which action must the analyst take during acquisition?