Disk wiping: Difference between revisions

From Notes to self
Jump to navigation Jump to search
No edit summary
No edit summary
Line 1: Line 1:
* To wipe an HDD by writing zeros to it:
* To wipe an HDD by writing zeros to it:
:<code>#  ddrescue -f /dev/zero /dev/sdX</code>
:<code>#  ddrescue -f /dev/zero /dev/addX</code>
:The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
:The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
* To wipe an [http://ark.intel.com/products/family/83425/Data-Center-SSDs Intel Data Center SSD] by the Intel Memory and Storage Tool:
* To wipe an Intel/Solidigm Data Center SSD by the [https://www.solidigm.com/support-page/drivers-downloads/ka-00085.html Solidigm Storage Tool]:
#Delete all partitions
#Delete all partitions
#<code># intelmas delete -intelssd ''#''</code>
#<code># sst delete --ssd ''#''</code>
::The index ''#'' can be found by using the command
::The index ''#'' can be found by using the command
::<code># intelmas show -intelssd</code>
::<code># sst show --ssd</code>
* To wipe a SSD by the [https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase ATA Security Erase] command:
* To wipe a SSD by the [https://ata.wiki.kernel.org/index.php/ATA_Secure_Erase ATA Security Erase] command:
#Make sure the drive is not frozen, support "enhanced erase" and <code>hdparm</code> prints "[number]min for SECURITY ERASE UNIT":
#Make sure the drive is not frozen, support "enhanced erase" and <code>hdparm</code> prints "[number]min for SECURITY ERASE UNIT":

Revision as of 19:57, 15 May 2026

  • To wipe an HDD by writing zeros to it:
# ddrescue -f /dev/zero /dev/addX
The average speed is above 100 MB/s, so 1 TB takes about 2-3 hours.
  1. Delete all partitions
  2. # sst delete --ssd #
The index # can be found by using the command
# sst show --ssd
  1. Make sure the drive is not frozen, support "enhanced erase" and hdparm prints "[number]min for SECURITY ERASE UNIT":
    # hdparm -I /dev/sdX
    [...]
    Security:
    Master password revision code = 65534
    supported
    not enabled
    not locked
    not frozen
    not expired: security count
    supported: enhanced erase
    3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT.
    [...]
  2. Set a user password (this password will be cleared on the next step, so the exact choice does not matter):
    # hdparm --user-master u --security-set-pass foo /dev/sdX
  3. Issue the ATA Secure Erase command:
    # hdparm --user-master u --security-erase foo /dev/sdX
  4. Check that security is disabled:
    # hdparm -I /dev/sdX
    [...]
    Security:
    Master password revision code = 65534
    supported
    not enabled
    not locked
    not frozen
    not expired: security count
    supported: enhanced erase
    3min for SECURITY ERASE UNIT. 3min for ENHANCED SECURITY ERASE UNIT.
    [...]