Start a Conversation

Solved!

Go to Solution

1 Rookie

 • 

33 Posts

437

November 17th, 2022 08:00

Erasing SED w/ Racadm on R640

I am trying to cryptoerase some Dell SED SSDs on a R640 with H730P. The drives are secured with unknown passcode. I have the PSID number. From Dell's Racadm Guide,

To perform cryptographic erase:
-psid

How do I find the fully qualified device descriptor (FQDD)? Is there another command I should use to find the FQDD? 

 

Thanks in advance

Moderator

 • 

3.7K Posts

November 17th, 2022 13:00

Hello TheMattHatter,

 

To get the list of physical disks and properties of the specified PCIeSSD physical disk.

racadm storage get pdisks

   Returns list, example:

   Disk.Bay.8:Enclosure.Internal.0-1:PCIeExtender.Slot.3

 

To perform a cryptographic erase operation on the specified PCIeSSD device, run the following command:

racadm storage secureerase: Disk.Bay.8:Enclosure.Internal.0-1:PCIeExtender.Slot.3

 

https://dell.to/3ApO1DR

 

1 Rookie

 • 

33 Posts

November 17th, 2022 16:00

Thanks for the reply Charles. Here is the output after running the command.

racadm>>storage secureerase:Disk.Bay.3:Enclosure.Internal.0-1:RAID.Integrated.1-1
STOR094 : The storage configuration operation is successfully completed
and the change is in pending state.
To apply the configuration operation immediately, create a configuration job
using the --realtime option.
To apply the configuration after restarting
the server, create a configuration job using the -r option.
To create the necessary real-time and restart jobs, run the jobqueue command.
For more information about jobqueue command, run the
'racadm help jobqueue' command.
racadm>>

It mentions the change is in pending state and the SED drive is still locked with foreign config when viewed in iDrac. How can I use the --realtime option to get the command to erase the drive? or is there another way to wipe a SED. I thought the PSID was need to crytographic erase the drive but I could be wrong.

 

4 Operator

 • 

3K Posts

November 17th, 2022 18:00

Once secureerase command is executed you need to create a job to apply the changes. for this you can use jobqueue command. Below link have the details on jobqueue command with examples.

https://www.dell.com/support/manuals/en-us/idrac9-lifecycle-controller-v6.x-series/idrac9_6.xx_racadm_pub/jobqueue?guid=guid-a57b0f48-1ebe-4cbe-9681-458e3348301d&lang=en-us 

E.g. 

racadm jobqueue create 
 
   -s TIME_NOW --realTime
  

Controller FQDD Example : RAID.Integrated.1-1

Moderator

 • 

4.1K Posts

November 17th, 2022 20:00

Hello, this isn't an official Dell doc but I wonder if this would help: https://dell.to/3ApM7Dq

No Events found!

Top