Start FDE secure drive erase

The start secureErase drive command erases all of the data from one or more full disk encryption (FDE) drives so that they can be reused as FDE drives.

Supported Arrays

This command applies to an individual DE2000H, DE4000H, DE4000F, DE6000H, or DE6000F storage array.

Roles

To execute this command on an storage array, you must have the Security Admin role.

Context

Run this command only when the FDE drives are no longer part of a secure volume group or disk pool, or when the security key is unknown.

Note: To erase a FIPS drive when the drive is locked and the security key to unlock it is unavailable, use the set drive securityID command.

Syntax

start secureErase (drive [trayID,[drawerID,]slotID 
] | drives[ 
trayID1,[drawerID1,]slotID1 ... trayIDn,[drawerIDn,]slotIDn

] )

Parameters

Parameter Description
drive or drives

For high-capacity drive trays, specify the tray ID value, the drawer ID value, and the slot ID value for the drive. For low-capacity drive trays, specify the tray ID value and the slot ID value for the drive. Tray ID values are 0 to 99 . Drawer ID values are 1 to 5 .

All slot ID maximums are 24. Slot ID values either begin at 0 or 1, depending on the tray model. Drive trays compatible with DE2000H, DE4000H, DE4000F, DE6000H, and DE6000F controllers have slot ID numbers starting at 0.

Enclose the tray ID value, the drawer ID value, and the slot ID value in square brackets ([ ]).

Attention: The drives list cannot contain all of the drives in the storage array, or the command will be rejected. To secure erase all drives, run this command twice, specifying the drive list in two separate groups.

Notes

The controller firmware creates a lock that restricts access to the FDE drives. FDE drives have a state called Security Capable. When you create a security key, the state is set to Security Enabled, which restricts access to all FDE drives that exist within the storage array.