Disk wiping: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
| Line 10: | Line 10: | ||
* To wipe a SSD by the [https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase ATA Security Erase] command: | * To wipe a SSD by the [https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase ATA Security Erase] command: | ||
*#Make sure the drive is not frozen and support "enhanced erase": | *#Make sure the drive is not frozen and support "enhanced erase": | ||
:<code># hdparm -I /dev/sdX | :<code># hdparm -I /dev/sdX | ||
| Line 25: | Line 24: | ||
:[...]</code> | :[...]</code> | ||
:Check that <code>hdparm</code> prints "XXXmin for SECURITY ERASE UNIT". | :Check that <code>hdparm</code> prints "XXXmin for SECURITY ERASE UNIT". | ||
*#Set a user password (this password will be cleared on the next step, so the exact choice does not matter): | *#Set a user password (this password will be cleared on the next step, so the exact choice does not matter): | ||
:<code># hdparm --user-master u --security-set-pass foo /dev/sdX</code> | :<code># hdparm --user-master u --security-set-pass foo /dev/sdX</code> | ||
*#Issue the ATA Secure Erase command: | *#Issue the ATA Secure Erase command: | ||
:<code># hdparm hdparm --user-master u --security-erase foo /dev/sdX</code> | :<code># hdparm hdparm --user-master u --security-erase foo /dev/sdX</code> | ||
[[Category: Debian GNU/Linux]] | [[Category: Debian GNU/Linux]] | ||
Revision as of 15:34, 20 September 2014
- To wipe an HDD by writing zeros to it:
# dd if=/dev/zero of=/dev/sdX iflag=nocache oflag=direct bs=4M
- The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
- To print transfer statistics (to stderr):
# killall -USR1 dd
- To wipe a SSD by the ATA Security Erase command:
- Make sure the drive is not frozen and support "enhanced erase":
# hdparm -I /dev/sdX- [...]
- Security:
- Master password revision code = 65534
- supported
- not enabled
- not locked
- not frozen
- not expired: security count
- supported: enhanced erase
- 3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT.
[...]- Check that
hdparmprints "XXXmin for SECURITY ERASE UNIT".
- Set a user password (this password will be cleared on the next step, so the exact choice does not matter):
# hdparm --user-master u --security-set-pass foo /dev/sdX
- Issue the ATA Secure Erase command:
# hdparm hdparm --user-master u --security-erase foo /dev/sdX