Disk wiping: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| (31 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
* To wipe an HDD by writing zeros to it: | * To wipe an HDD by writing zeros to it: | ||
:<code># ddrescue --force /dev/zero /dev/sdX</code> | |||
:<code># | |||
:The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours. | :The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours. | ||
* To wipe an [http://ark.intel.com/products/family/83425/Data-Center-SSDs Intel Data Center SSD] by the Intel Memory and Storage Tool: | |||
: | #Delete all partitions | ||
#<code># intelmas delete -intelssd ''#''</code> | |||
:<code># | ::The index ''#'' can be found by using the command | ||
::<code># intelmas show -intelssd</code> | |||
* To wipe a SSD by the [https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase ATA Security Erase] command: | * To wipe a SSD by the [https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase ATA Security Erase] command: | ||
#Make sure the drive is not frozen, support "enhanced erase" and <code>hdparm</code> prints "[number]min for SECURITY ERASE UNIT": | |||
#Make sure the drive is not frozen | #:<code># hdparm -I /dev/sdX | ||
:<code># hdparm -I /dev/sdX | #:[...] | ||
:[...] | #:Security: | ||
:Security: | #:: Master password revision code = 65534 | ||
:: Master password revision code = 65534 | #:: supported | ||
:: supported | #:: not enabled | ||
:: not enabled | #:: not locked | ||
:: not locked | #:: <span style="background:#ffff00">not frozen</span> | ||
:: <span style="background:#ffff00">not frozen</span> | #:: not expired: security count | ||
:: not expired: security count | #::: <span style="background:#ffff00">supported: enhanced erase</span> | ||
::: <span style="background:#ffff00">supported: enhanced erase</span> | #:: 3<span style="background:#ffff00">min for SECURITY ERASE UNIT</span>. 3min for ENHANCED SECURITY ERASE UNIT. | ||
:: 3<span style="background:#ffff00">min for SECURITY ERASE UNIT</span>. 3min for ENHANCED SECURITY ERASE UNIT. | #:[...]</code> | ||
:[...]</code> | #Set a user password (this password will be cleared on the next step, so the exact choice does not matter): | ||
:Check that <code>hdparm</ | #:<code># hdparm --user-master u --security-set-pass foo /dev/sdX</code> | ||
#Issue the ATA Secure Erase command: | |||
#:<code># hdparm --user-master u --security-erase foo /dev/sdX</code> | |||
[[Category: | #Check that security is disabled: | ||
#:<code># hdparm -I /dev/sdX | |||
#:[...] | |||
#:Security: | |||
#:: Master password revision code = 65534 | |||
#::: supported | |||
#:: <span style="background:#ffff00">not enabled</span> | |||
#:: not locked | |||
#:: not frozen | |||
#:: not expired: security count | |||
#::: supported: enhanced erase | |||
#:: 3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT. | |||
#:[...]</code> | |||
[[Category: Linux]] | |||
[[Category: Hardware]] | |||
Latest revision as of 19:51, 22 June 2021
- To wipe an HDD by writing zeros to it:
# ddrescue --force /dev/zero /dev/sdX- The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
- To wipe an Intel Data Center SSD by the Intel Memory and Storage Tool:
- Delete all partitions
# intelmas delete -intelssd #
- The index # can be found by using the command
# intelmas show -intelssd
- To wipe a SSD by the ATA Security Erase command:
- Make sure the drive is not frozen, support "enhanced erase" and
hdparmprints "[number]min for SECURITY ERASE UNIT":# hdparm -I /dev/sdX- [...]
- Security:
- Master password revision code = 65534
- supported
- not enabled
- not locked
- not frozen
- not expired: security count
- supported: enhanced erase
- 3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT.
[...]
- Set a user password (this password will be cleared on the next step, so the exact choice does not matter):
# hdparm --user-master u --security-set-pass foo /dev/sdX
- Issue the ATA Secure Erase command:
# hdparm --user-master u --security-erase foo /dev/sdX
- Check that security is disabled:
# hdparm -I /dev/sdX- [...]
- Security:
- Master password revision code = 65534
- supported
- not enabled
- not locked
- not frozen
- not expired: security count
- supported: enhanced erase
- 3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT.
- Master password revision code = 65534
[...]