Page 51
MegaRAID SAS Software User Guide Chapter 3: SafeStore Disk Encryption
| Instant Secure Erase
If the encryption key on the drive changes, the drive cannot decrypt the data on the
platters, effectively erasing the data on the disks. The National Institute of Standards
and Technology (http://www.nist.gov) values this type of data erasure above secure
erase and below physical destruction of the device.
There are three major reasons for using instant secure erase.
If there is a need to repurpose the hard drive for a different application.
You might need to move the drive to another server to expand storage elsewhere, but
the drive is in use. The data on the drive might contain sensitive data including
customer information that, if lost or divulged, could cause an embarrassing disclosure
of a security hole. You can use the instant secure erase feature to effectively erase the
data so the drive can be moved to another server or area without concern that old data
could be found.
If there is a need to replace drives.
If the amount of data has outgrown the storage system, and there is no room to expand
capacity by adding drives, you might choose to purchase upgrade drives. If the older
drives support encryption, you can erase the data instantly so the new drives can be
used.
If there is a need to return a disk for warranty activity.
If the drive is beginning to show SMART predictive failure alerts, you might want to
return the drive for replacement. If so, the drive needs to be effectively erased if there is
sensitive data. Occasionally a drive is in such bad condition that standard erasure
applications do not work. If the drive still allows any access, it might be possible to
destroy the encryption key.
To Next Page
Loading...
Need help?
General