Disk wiping: Difference between revisions

From Notes to self
Jump to navigation Jump to search
No edit summary
No edit summary
 
(35 intermediate revisions by the same user not shown)
Line 1: Line 1:
* To wipe an HDD by writing zeros to it:
* To wipe an HDD by writing zeros to it:
:<code># dd if=/dev/zero of=/dev/sdX iflag=nocache oflag=direct bs=4M</code>
:<code># ddrescue -f /dev/zero /dev/adaX</code>
:The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
:The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
:To print transfer statistics (to stderr):
* To wipe an Intel/Solidigm Data Center SSD by the [https://www.solidigm.com/support-page/drivers-downloads/ka-00085.html Solidigm Storage Tool] (on Linux):
:<code># killall -USR1 dd</code>
#Delete all partitions
* To wipe an [http://ark.intel.com/products/family/83425/Data-Center-SSDs Intel data center SSD] by the [https://downloadcenter.intel.com/download/23931/Intel-Solid-State-Drive-Data-Center-Tool Intel SSD Data Center Tool]:
#<code># sst delete --ssd <index></code>
:<code># isdct delete -intelssd ''I''</code>
::The <code><index></code> can be found by using the command
:The index ''I'' can be found by using the command
::<code># sst show --ssd</code>
:<code># isdct show -intelssd</code>
* To wipe a SSD by the ATA Security Erase command:
* To wipe a SSD by the [https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase ATA Security Erase] command:
#Delete all partitions and destroy the partitioning scheme
#Make sure the drive is not frozen, support "enhanced erase" and <code>hdparm</code> prints "[number]min for SECURITY ERASE UNIT":
#:<code># gpart destroy -F adaX</code>
#:<code># hdparm -I /dev/sdX
#Make sure the drive is '''not frozen''' and support '''"enhanced erase"'''
#:[...]
#:<code># camcontrol security adaX</code>
#:Security:
 
#::        Master password revision code = 65534
#Issue the ATA Secure Erase command
#::                supported
#:<code># camcontrol security adaX -U user -s Erase -h Erase</code>
#::        not     enabled
[[Category: FreeBSD]]
#::        not    locked
[[Category: Linux]]
#::        <span style="background:#ffff00">not    frozen</span>
#::        not    expired: security count
#:::                <span style="background:#ffff00">supported: enhanced erase</span>
#::        3<span style="background:#ffff00">min for SECURITY ERASE UNIT</span>. 3min for ENHANCED SECURITY ERASE UNIT.
#:[...]</code>
#Set a user password (this password will be cleared on the next step, so the exact choice does not matter):
#:<code># hdparm --user-master u --security-set-pass foo /dev/sdX</code>
#Issue the ATA Secure Erase command:
#:<code># hdparm --user-master u --security-erase foo /dev/sdX</code>
#Check that security is disabled:
#:<code># hdparm -I /dev/sdX
#:[...]
#:Security:
#::        Master password revision code = 65534
#:::                supported
#::        <span style="background:#ffff00">not    enabled</span>
#::        not    locked
#::        not    frozen
#::        not    expired: security count
#:::                supported: enhanced erase
#::        3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT.
#:[...]</code>
[[Category: Debian GNU/Linux]]
[[Category: Hardware]]
[[Category: Hardware]]

Latest revision as of 20:37, 15 May 2026

  • To wipe an HDD by writing zeros to it:
# ddrescue -f /dev/zero /dev/adaX
The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
  1. Delete all partitions
  2. # sst delete --ssd <index>
The <index> can be found by using the command
# sst show --ssd
  • To wipe a SSD by the ATA Security Erase command:
  1. Delete all partitions and destroy the partitioning scheme
    # gpart destroy -F adaX
  2. Make sure the drive is not frozen and support "enhanced erase"
    # camcontrol security adaX
  1. Issue the ATA Secure Erase command
    # camcontrol security adaX -U user -s Erase -h Erase