Dell Data Wipe (NIST 800-88r1, IEEE 2883-2022) Supported Storage Media Sanitize Actions
Summary: Information about supported commands for Dell Data Wipe.
Symptoms
No symptoms information is available.
Cause
No cause information is available.
Resolution
Dell Data Wipe Command Information.
In general, the sanitize requirements that are pasted below are manufacture implementation requirements. Dell Data Wipe issues the commands in the table below to the storage media.
The storage media manufacturer implements the wipe behavior to meet the National Institute of Standards and Technology (NIST) guideline and Institute of Electrical and Electronics Engineers (IEEE) standard. The BIOS is only issuing the command, and not directly telling the storage media how to perform the command. The BIOS does not control the storage media behavior once the wipe commands are issued to the media.
Depending on the media, different commands are issued. The result is a Purge, or a Clear, depending on the storage media type (Table 1).
| Storage Media | Commands | Method NIST 800-88r1 | Method IEEE 2883-2022 |
|---|---|---|---|
| PCIe/NVMe SSD - Non SED* | Sanitize | Purge | Purge |
| PCIe/NVMe SSD - SED* | Sanitize | Purge | Purge |
| eMMC | Erase and Sanitize | Clear | Clear |
| UFS | Erase and Purge | Purge | Purge |
| ATA SSD | Sanitize | Purge | Purge |
| ATA HDD | Enhanced Security Erase | Purge | Purge |
*Self-Encrypting Drive
Table 1 - Storage Media Sanitization Commands.
NIST 800-88r1 guideline: NIST Special Publication 800-88 - Guidelines for Media Sanitization states the following:
Clear, Purge, and Destroy are actions that can be taken to sanitize the media. The sanitization categories are defined as:
- Clear applies logical techniques to sanitize data in all user-addressable storage locations. For protection against simple noninvasive data recovery techniques; typically applied through the standard Read and Write commands to the storage device, such as by rewriting with a new value or using a menu option to reset the device to the factory state (where rewriting is not supported).
- Purge applies physical or logical techniques that render Target Data recovery infeasible using state-of-the-art laboratory techniques.
- Destroy renders Target Data recovery infeasible using state-of-the-art laboratory techniques and results in the subsequent inability to use the media for storage of data.