|
FDRERASE Overview | FDRERASE CCEVS Certification |
Protect Sensitive Data | Try FDRERASE FREE for Up to 3TB of Data!! |
Product Brochure
Innovation Data Processing is pleased to announce a new product:
FDRERASE. FDRERASE can be licensed as an option to FDRPAS, or
as a stand-alone product for use by any installation.
There are many times when you may wish to insure that all corporate
data has been erased from a set of disk volumes, for example:
- At the end of a disaster test, or when leaving the site after a real disaster
- When you are disconnecting a disk control unit, after moving all data with
FDRPAS or some other means
- When reusing disk volumes for new purposes, to be sure that no residual
data remains
- FDRERASE meets these needs. It can quickly erase many disk volumes in parallel,
allowing you to erase your data from a set of disks in the minimum elapsed time.
- The ERASE function of FDRERASE will overwrite every track with a single
track-length record consisting of binary zeroes. This will make all data originally on each track
unrecoverable by any normal means (through the disk control unit). This is sufficient for most purposes.
- Optionally you can specify a pattern of data for the record, a single
hex byte which is replicated throughout the track-length record.
- Optionally you can cause the erase record to be written on each track
multiple times, and can vary the pattern in each “pass”.
- The SECUREERASE function will default to 3 passes on each track, writing
a random pattern, a complement of the first pattern, and finally another random pattern.
This makes the original data unrecoverable even if the hard drives are removed from the control unit and
may be used for sensitive data when the disks will be sold or scrapped.
- The QUICKERASE function will use hardware ERASE commands to erase all
records from each track in a minimum amount of time. QUICKERASE is usually sufficient to eradicate
corporate data when the disks will be reused, such as at a disaster site.
- The SIMERASE function will not erase any disks, but will validate your
control statements and identify the disks that will be erased.
FDRERASE complies with the government National Computer Security
Center (NCSC) guidelines for erasing computer disks. The ERASE function
meets the NCSC definition for "clearing" a disk and the
SECUREERASE function meets the NCSC definition for "purging"
a disk.
The QUICKERASE function and the default form of the ERASE function
transmit only a few bytes per track erased, so they can erase many
disks concurrently without overloading the disk channels.
FDRERASE User Experience:
" We are a state government and our data includes financial,
personnel, motor vehicle and other sensitive data, which must
be erased after a DR test. A minimal INIT of the volume would
wipe out the VTOC but leave the data on the disk, which is not
acceptable to our auditors.ÊWe used to take 12 hours out
of our 48-hour test time to completely erase the disks. We used
the QUICKERASE function of FDRERASE and saved over 80% of that
time, giving us 10 more hours to test. The disk subsystems were
EMC 8430 Symmetrix model.
The Result: 612 3390-3 volumes took 83 minutes. Another set
of 332 3390-3 volumes took 43 minutes and 18 3390-9 volumes
took 9 minutes." |
You can run a considerable number of concurrent erase functions
with little increase in time-per-disk, but your elapsed time will
vary depending on the type of subsystem and type of channels. FDRERASE
can erase up to 64 disks concurrently in a single step, and up to
8190 volumes total per step.
The SECUREERASE and other non-default operations may take longer
since FDRERASE must send more data down the channel for each track.
FDRERASE operates only on offline disks. You specify device address,
or an address prefix (such as 1A* to do devices 1A00-1AFF); FDRERASE
will identify the offline disk devices and erase only those volumes.
For FDRPAS customers, FDRERASE will erase only FDRPAS source volumes
(previously online), but it can be told to erase any offline disk.
Here is a sample FDRERASE jobstream:
//ERASE EXEC PGM=FDRERASE,REGION=0M //SYSPRINT DD SYSOUT=* //SYSIN DD * ERASE TYPE=FULL,MAXTASKS=20 MOUNT ERASEUNIT=(1A*,1B*)
This sample jobstream for FDRERASE can be downloaded as file: FDRERASE.txt
As an example of the results, we used FDRDSF PRINT to print a track
on a disk; before the erase, you can see the data on the track:
FDR520
PRINTING FROM DEVICE TYPE 3390-3 TO OUTPUT DDNAME TAPE1
FDR521 CYLINDER 00003 TRACK 0000 ------------------ RECORD ZERO
0003000000000008 -- DATA 0003000000000000 ------
FDR522 COUNT FIELD 0003000001002350
000000 4E4EE4E2 C5D9D4D6 C44DD3C6 F5F0F3F5 F65D4040 40404040
40404040 40404040 *..USERMOD.LF50356. *
000020 615C4040 40404040 40404040 40404040 40404040 40404040
40404040 40404040 *.. *
... |
After an ERASE, the printout shows the erase record on the track;
the original data is gone:
FDR520
PRINTING FROM DEVICE TYPE 3390-3 TO OUTPUT DDNAME TAPE1 FDR521
CYLINDER 00003 TRACK 0000 ------------------ RECORD ZERO 0003000000000008
-- DATA 0000000000000000 ------
FDR522 COUNT FIELD 000300000100DD58
000000 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 *...............................*
LINE 000020-00DD40 SAME AS ABOVE
* |
FDRERASE takes offline disk addresses as input. You can also use FDREPORT
to select offline
disks based on their volume serials and generate an FDRERASE step
for those disks.
An example can be downloaded as file: FDREPORT_FDRERASE.txt
|