Start FDE secure drive erase
The start secureErase drive command erases all of the data from one or more full disk encryption (FDE) drives so that they can be reused as FDE drives.
Supported Arrays
This command applies to an individual DE2000H, DE4000H, DE4000F, DE6000H, or DE6000F storage array.
Roles
To execute this command on an storage array, you must have the Security Admin role.
Context
Run this command only when the FDE drives are no longer part of a secure volume group or disk pool, or when the security key is unknown.
Syntax
start secureErase (<span className="ph">drive [trayID,[drawerID,]slotID
] | drives[ <var className="keyword varname">
trayID1,[drawerID1,]slotID1 ... trayIDn,[drawerIDn,]slotIDn
</var>
] </span>)
Parameters
| Parameter | Description |
|---|---|
| drive or drives | For high-capacity drive trays, specify the tray ID value, the drawer ID value, and the slot ID value for the drive. For low-capacity drive trays, specify the tray ID value and the slot ID value for the drive. Tray ID values are 0 to 99 . Drawer ID values are 1 to 5 . All slot ID maximums are 24. Slot ID values either begin at 0 or 1, depending on the tray model. Drive trays compatible with DE2000H, DE4000H, DE4000F, DE6000H, and DE6000F controllers have slot ID numbers starting at 0. Enclose the tray ID value, the drawer ID value, and the slot ID value in square brackets ([ ]). Attention The drives list cannot contain all of the drives in the storage array, or the command will be rejected. To secure erase all drives, run this command twice, specifying the drive list in two separate groups. |
Notes
The controller firmware creates a lock that restricts access to the FDE drives. FDE drives have a state called Security Capable. When you create a security key, the state is set to Security Enabled, which restricts access to all FDE drives that exist within the storage array.