Disk wiping: Difference between revisions

From Notes to self
Jump to navigation Jump to search
No edit summary
No edit summary
Line 12: Line 12:
<pre>
<pre>
         [...]
         [...]
Security Option          Value
        Security Option          Value
supported                yes
        supported                yes
enabled                  no
        enabled                  no
drive locked              no
        drive locked              no
security config frozen    no
        security config frozen    no
count expired            no
        count expired            no
security level            high
        security level            high
enhanced erase supported  yes
        enhanced erase supported  yes
erase time                4 min
        erase time                4 min
enhanced erase time      4 min
        enhanced erase time      4 min
[...]
        [...]
</pre>
</pre>
#Set a user password (this password will be cleared on the next step, so the exact choice does not matter):
#Set a user password (this password will be cleared on the next step, so the exact choice does not matter):

Revision as of 20:17, 15 May 2026

  • To wipe an HDD by writing zeros to it:
# ddrescue -f /dev/zero /dev/addX
The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
  1. Delete all partitions
  2. # sst delete --ssd <index>
The <index> can be found by using the command
# sst show --ssd
  • To wipe a SSD by the ATA Security Erase command:
  1. Make sure the drive is not frozen and support "enhanced erase":
    # camcontrol security adaX
        [...]
        Security Option           Value
        supported                 yes
        enabled                   no
        drive locked              no
        security config frozen    no
        count expired             no
        security level            high
        enhanced erase supported  yes
        erase time                4 min
        enhanced erase time       4 min
        [...]
  1. Set a user password (this password will be cleared on the next step, so the exact choice does not matter):
    # hdparm --user-master u --security-set-pass foo /dev/sdX
  2. Issue the ATA Secure Erase command:
    # hdparm --user-master u --security-erase foo /dev/sdX
  3. Check that security is disabled:
    # hdparm -I /dev/sdX
    [...]
    Security:
    Master password revision code = 65534
    supported
    not enabled
    not locked
    not frozen
    not expired: security count
    supported: enhanced erase
    3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT.
    [...]