1 Rookie
•
33 Posts
0
437
Erasing SED w/ Racadm on R640
I am trying to cryptoerase some Dell SED SSDs on a R640 with H730P. The drives are secured with unknown passcode. I have the PSID number. From Dell's Racadm Guide,
To perform cryptographic erase:
-psid
How do I find the fully qualified device descriptor (FQDD)? Is there another command I should use to find the FQDD?
Thanks in advance
DELL-Charles R
Moderator
Moderator
•
3.7K Posts
1
November 17th, 2022 13:00
Hello TheMattHatter,
To get the list of physical disks and properties of the specified PCIeSSD physical disk.
racadm storage get pdisks
Returns list, example:
Disk.Bay.8:Enclosure.Internal.0-1:PCIeExtender.Slot.3
To perform a cryptographic erase operation on the specified PCIeSSD device, run the following command:
racadm storage secureerase: Disk.Bay.8:Enclosure.Internal.0-1:PCIeExtender.Slot.3
https://dell.to/3ApO1DR
TheMattHatter
1 Rookie
1 Rookie
•
33 Posts
0
November 17th, 2022 16:00
Thanks for the reply Charles. Here is the output after running the command.
racadm>>storage secureerase:Disk.Bay.3:Enclosure.Internal.0-1:RAID.Integrated.1-1
STOR094 : The storage configuration operation is successfully completed
and the change is in pending state.
To apply the configuration operation immediately, create a configuration job
using the --realtime option.
To apply the configuration after restarting
the server, create a configuration job using the -r option.
To create the necessary real-time and restart jobs, run the jobqueue command.
For more information about jobqueue command, run the
'racadm help jobqueue' command.
racadm>>
It mentions the change is in pending state and the SED drive is still locked with foreign config when viewed in iDrac. How can I use the --realtime option to get the command to erase the drive? or is there another way to wipe a SED. I thought the PSID was need to crytographic erase the drive but I could be wrong.
DELL-Shine K
4 Operator
4 Operator
•
3K Posts
1
November 17th, 2022 18:00
Once secureerase command is executed you need to create a job to apply the changes. for this you can use jobqueue command. Below link have the details on jobqueue command with examples.
https://www.dell.com/support/manuals/en-us/idrac9-lifecycle-controller-v6.x-series/idrac9_6.xx_racadm_pub/jobqueue?guid=guid-a57b0f48-1ebe-4cbe-9681-458e3348301d&lang=en-us
E.g.
DELL-Young E
Moderator
Moderator
•
4.1K Posts
1
November 17th, 2022 20:00
Hello, this isn't an official Dell doc but I wonder if this would help: https://dell.to/3ApM7Dq