Chapter 4 Using TD4
Option
NIST 800-88 R1 Clear
NIST 800-88 R1 Purge
Note: Secure Erase and Sanitize wipes have notable nuances, as follows:
The exact differences between Secure Erase and Sanitize can be subtle,
depending on the drive manufacturer's implementation. But, in general terms,
Secure Erase is adequate for environments that are not concerned with
removing any evidence of previous data in the physical memory chips. Secure
Erase will guarantee that a typical host system read will return only wiped
data, but someone with advanced capabilities to do chip-off memory structure
analysis could theoretically discern previous data bit states. Sanitize is meant
to cover situations that demand more secure data removal where advanced
data retrieval techniques are of concern, with the downside of it taking much
longer to complete.
Secure Erase and Sanitize command requirements do not guarantee the final
state of the data on wiped drives, which can result in wipe job failures that are
out of TD4's control. From OpenText empirical testing over a large sample size
of drives from different manufacturers, Secure Erase will reliably wipe drives
in a very short period of time, but with a higher likelihood of a non-
deterministic data state when complete, which makes reliable verification
impossible. Sanitize has proven to be more reliable in clearing all data to zeros,
which allows for post-wipe verification. If you experience Sanitize wipe
verification failures, contact OpenText My Support at
support.opentext.com
the Tableau team will investigate.
OpenText™ Tableau™ Forensic TD4 Duplicator
48
Description
A NIST Clear wipe will perform an overwrite wipe with
post-wipe verification. For USB drives it will perform three
passes, and for all other drives it will perform one pass.
TD4 will force removal of any detected HPA/DCO/AMA
configurations prior to starting a NIST 800-88 R1 Clear wipe.
For more details regarding NIST 800-88 R1 Clear, refer to SP
800-88 r1: Guidelines for Media Sanitization which is available
on NIST's web site.
A NIST Purge wipe is only possible if the drive supports
certain wipe commands. For SSDs that support Sanitize -
Block Erase, that method will be used with post-wipe
verification. Otherwise, if a drive supports Sanitize –
Overwrite (HDD or SSD), then that method will be used with
post-wipe verification. Drives that do not support either of
these commands cannot be NIST 800-88 R1 Purged, and the
TD4 will indicate this limitation during wipe type selection.
TD4 will force removal of any detected HPA/DCO/AMA
configurations prior to starting a NIST 800-88 R1 Purge wipe.
For more details regarding NIST 800-88 R1 Purge, refer to SP
800-88 r1: Guidelines for Media Sanitization which is available
on NIST's web site.
to report the specific make and model of the drive, and
https://
ISTD230100-UGD-EN-1
Need help?
Do you have a question about the Tableau Forensic TD4 and is the answer not in the manual?