Friday, February 24, 2017

raid5 - How should I sanitize a SAS drive that I removed from a RAID 5 Array?



I had a disk experience a predictive failure. As a result, I removed the drive and replaced it.




Now that I have the drive removed, I would like to sanitize it. What is the easiest way to go about that?



I have a usb to SATA converter, but I'm not sure if that would work. But all I really want to do is execute the secure erase command.


Answer



You're going to need a host with a SAS controller or an eraser appliance that supports SAS. As Chris S is pointing out, you can use SATA drives with SAS controllers, but not the other way around.



As far as secure deletion, one pass with zeros will stop the amateurs, if you're worried about a TLA, make it one pass with random data, more if you're paranoid. What you really have to watch out for is remapped sectors...if you can't wipe those and the data is sufficiently sensitive, you should probably physically destroy the platters as Kromey suggests. Outfits that deal with classified data usually have special arrangements with the manufacturers so that they only return the part of the drive case with the label when getting warranty replacements.



Note that Guttman patterns were designed for MFM/RLL drives...I think I've read somewhere that he recommends overwriting with random data is the best you can do, but I don't have a citation handy at the moment.




Note also that I'm assuming you're talking about a conventional mechanical drive...an SSD is a whole different deal.


No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...