web-dev-qa-db-fra.com

Comment utiliser Secure Erase et se trouve-t-il sur le CD d'installation?

Soi-disant, il existe une magie de disque dur intégrée appelée "Secure Erase" qui est beaucoup plus rapide et sécurisée que "dd if =/dev/zero ..."

Je suis très excité par l'augmentation de la vitesse.

Il semble y avoir une interface graphique dans Parted Magic: http://www.ocztechnologyforum.com/forum/showthread.php?81321-Secure-Erase-With-bootable-CD-USB-Linux. .-Point-and-Click-Méthode

Est-ce qu'il y a quelque chose comme ça pour Ubuntu? Mieux encore, est-il possible d'émettre cette commande "manuellement" comme avec smartctl ou quelque chose du genre?

securityhard-drivedelete
5
Mikey

Secure Erase fait partie de la norme ATA et est pris en charge par le programme stock-standard hdparm:

  ATA Security Feature Set

   These switches are DANGEROUS to experiment with, and might not work with some kernels.  USE AT YOUR OWN RISK.

   --security-help
          Display terse usage info for all of the --security-* options.

   --security-freeze
          Freeze the drive´s security settings.  The drive does not accept any security commands until  next  power-on  reset.
          Use this function in combination with --security-unlock to protect drive from any attempt to set a new password. Can
          be used standalone, too.  No other options are permitted on the command line with this one.

   --security-unlock PWD
          Unlock the drive, using password PWD.  Password is given as an ASCII string and is padded  with  NULs  to  reach  32
          bytes.   The  applicable  drive password is selected with the --user-master switch (default is "user" password).  No
          other options are permitted on the command line with this one.

   --security-set-pass PWD
          Lock the drive, using password PWD (Set Password) (DANGEROUS).  Password is given as an ASCII string and  is  padded
          with NULs to reach 32 bytes.  Use the special password NULL to set an empty password.  The applicable drive password
          is selected with the --user-master switch (default is "user" password) and the applicable  security  mode  with  the
          --security-mode switch.  No other options are permitted on the command line with this one.

   --security-disable PWD
          Disable drive locking, using password PWD.  Password is given as an ASCII string and is padded with NULs to reach 32
          bytes.  The applicable drive password is selected with the --user-master switch (default is  "user"  password).   No
          other options are permitted on the command line with this one.

   --security-erase PWD
          Erase  (locked) drive, using password PWD (DANGEROUS).  Password is given as an ASCII string and is padded with NULs
          to reach 32 bytes.  Use the special password NULL to represent an empty password.  The applicable drive password  is
          selected  with the --user-master switch (default is "user" password).  No other options are permitted on the command
          line with this one.

   --security-erase-enhanced PWD
          Enhanced erase (locked) drive, using password PWD (DANGEROUS).  Password is given as an ASCII string and  is  padded
          with  NULs  to  reach 32 bytes.  The applicable drive password is selected with the --user-master switch (default is
          "user" password).  No other options are permitted on the command line with this one.

   --user-master USER
          Specifies which password (user/master) to select.  Defaults to user  password.   Only  useful  in  combination  with
          --security-unlock, --security-set-pass, --security-disable, --security-erase or --security-erase-enhanced.
                  u       user password
                  m       master password

   --security-mode MODE
          Specifies which security mode (high/maximum) to set.  Defaults to high.  Only useful in combination with --security-
          set-pass.
                  h       high security
                  m       maximum security

          THIS FEATURE IS EXPERIMENTAL AND NOT WELL TESTED. USE AT YOUR OWN RISK.

Pour des raisons évidentes, je n'ai pas testé ces options, vous aurez besoin de voir si elles fonctionnent vous-même :)

5
Sergey