I need to run a security erase tool on my drive

Question

I downloaded Hirens Boot CD and it just stops and says "No PXE" or similar. So that is obviously a stumbling block and I can't afford to keep downloading on the basis that it may be a bad download. I just don't have the data allowance.

So anyone know if Linux has native tools that will secure erase the drive, the drive manufacturer said that it would need to be a secure erase tool and then reformat the drive to force bad blocks to be marked and swapped out.

So far I have deduced that the image I took of the drive is perfect, I am happy with that fact, what I need to do is to follow the manufacturers advice, if that doesn't work I have time to get the drive back to them under warranty.

So far I have wasted 2 months on this and time is running out and until I have attempted this, the manufacturer can't open a support ticket.

** EDIT **

The output from the suggestion I run hdparm -I /dev/sda which I am informed the drive is frozen. The output is lengthy so I trimmed off to the bits of information that shows the drives supported features and security.

Enabled Supported:
   *    SMART feature set
        Security Mode feature set
   *    Power Management feature set
   *    Write cache
   *    Look-ahead
   *    Host Protected Area feature set
   *    WRITE_BUFFER command
   *    READ_BUFFER command
   *    DOWNLOAD_MICROCODE
   *    Advanced Power Management feature set
        SET_MAX security extension
   *    48-bit Address feature set
   *    Device Configuration Overlay feature set
   *    Mandatory FLUSH_CACHE
   *    FLUSH_CACHE_EXT
   *    SMART error logging
   *    SMART self-test
   *    General Purpose Logging feature set
   *    WRITE_{DMA|MULTIPLE}_FUA_EXT
   *    WRITE_UNCORRECTABLE_EXT command
   *    Gen1 signaling speed (1.5Gb/s)
   *    Gen2 signaling speed (3.0Gb/s)
   *    Native Command Queueing (NCQ)
   *    Phy event counters
        DMA Setup Auto-Activate optimization
   *    Software settings preservation
   *    Data Set Management TRIM supported (limit unknown)
Security: 
Master password revision code = 65534
    supported
not enabled
not locked
    frozen
not expired: security count
    supported: enhanced erase
12min for SECURITY ERASE UNIT. 12min for ENHANCED SECURITY ERASE UNIT. 
Checksum: correct

The following I am not sure on, the second option I know I definitely can't do as the drive plugs directly on to a socket on the PC.

4. If your device is frozen, you can try: Suspend and resume Hot replug the SATA cable (i.e. with the system loaded, unplug the SATA cable an plug it again)

I don't see any reference to suspending and resuming a drive in the GUI and I wouldn't know what to type in to the terminal, if it is an fdisk or mount or unmount or special program command.

Using terminal, as it seems to be the most reliable way of getting things done, what do I do to suspend and resume the drive?

** EDIT **

I tried the hdparm -I /dev/sda after a suspend and resume, took me ages to get back to normal, had to reboot a couple of times and enable networking again, on checking, the drive still shows as being frozen, does a force option exist to force the change?

Answer 1

If your SSD supports it, use the ATA Secure Erase command; assuming that your drive is /dev/sda:

1. Boot Ubuntu from a Live DVD
2. Open a Terminal with Ctrl+Alt+t
3. Check that your drive is not frozen: hdparm -I /dev/sda (look for the frozen or not frozen line)
4. If your device is frozen, you can try:
   • Suspend and resume
   • Hot replug the SATA cable (i.e. with the system loaded, unplug the SATA cable an plug it again)
5. Set a user password: hdparm --user-master u --security-set-pass <password> /dev/sda (replace <password> with the chosen password)
6. Check that security has been enabled: hdparm -I /dev/sda (look for the enabled or not enabled line)
7. Issue the Secure Erase command: hdparm --user-master u --security-erase <password> /dev/sda (replace <password> with the chosen password)
8. Check that security has been disabled: hdparm -I /dev/sda (look for the enabled or not enabled line)

This is the best method to wipe a SSD, since Secure Erase runs at firmware level and has access to all the storage areas of the device, while regular software tools don't. For further reading: ATA Secure Erase - ata Wiki and SSD Data Wiping: Sanitize or Secure Erase SSDs? | Kingston Technology