Security; Drive Erase; Sanitize Erase - HPE Smart Array P824i-p MR Gen10 User Manual

Security

Drive erase

Erase data on drives by using the Drive Erase option. The erase operation consists of a series of write
operations to a drive that overwrite every user-accessible sector of the drive with specified patterns. The
erase operation can be repeated in multiple passes using different data patterns for enhanced security.
The erase operation is performed as a background task.
After the drive erase operation has started, you can stop the erase using the Actions menu.
Simple
A Simple erase writes a pattern to the logical drive in a single pass.
Normal
A normal erase operation is a three-pass operation that first overwrites the drive contents with random
values then overwrites it twice with patterns.
Thorough
A thorough drive erase operation repeats the Normal drive erase operation three times.

Sanitize erase

The sanitize erase feature lets you erase the data residing on a drive using the Sanitize feature. Sanitize
is similar to the Drive Erase feature, except that sanitize is performed by the drive firmware and drive
erase is performed by the controller firmware.
The sanitize option is an industry standard SCSI feature. It uses industry standard Sanitize SCSI Block
command. The sanitize operation is constantly monitored by the controller firmware, and the drive
sanitization progress events are reported to you through Background Operations Support.
To Sanitize a drive, you must make sure that:
• The selected drive is in an Unconfigured Good state.
• The selected drive is not a JBOD drive.
• The selected drive is not part of any array, dedicated spare drive, or global spare drive.
Sanitize operation is enabled only when no other operation is in progress on the selected drive. When the
sanitize operation is in progress, you cannot perform any other operation on the drive that is being
sanitized.
Depending on the drives you have selected for sanitization (SSDs or HDDs), the following options are
available:
• Overwrite - HDD only; This option writes a data pattern on the drive one or more times.
• Block erase - SSD only; This option sets the physical blocks on the drive to a vendor-specific value.
• Allow Unrestricted Sanitize Exit - If the Sanitize operation fails, the system tries to bring the drive out of
the failure mode. If this option is slected, and if the system succeeds in bringing the drive out of the
failure mode, the drive is returned to an Unconfigured Good state. If this option is not selected, and if
the Sanitize operation fails, the system places the drive in an Unconfigured Bad state.
24 Features