Site Meter
SEARCH

Technical Center

Contact:
Latest News
Information Center
Worldwide Sites 


Overview

Innovation Data Processing is pleased to announce a new product: FDRERASE. FDRERASE can be licensed as an option to FDRPAS, or as a stand-alone product for use by any installation.

There are many times when you may wish to insure that all corporate data has been erased from a set of disk volumes, for example:

  • At the end of a disaster test, or when leaving the site after a real disaster
  • When you are disconnecting a disk control unit, after moving all data with FDRPAS or some other means
  • When reusing disk volumes for new purposes, to be sure that no residual data remains
  • FDRERASE meets these needs. It can quickly erase many disk volumes in parallel, allowing you to erase your data from a set of disks in the minimum elapsed time.
FDRERASE offers various levels of erase:

  • The ERASE function of FDRERASE will overwrite every track with a single track-length record consisting of binary zeroes. This will make all data originally on each track unrecoverable by any normal means (through the disk control unit). This is sufficient for most purposes.
  • Optionally you can specify a pattern of data for the record, a single hex byte which is replicated throughout the track-length record.
  • Optionally you can cause the erase record to be written on each track multiple times, and can vary the pattern in each “pass”.
  • The SECUREERASE function will default to 3 passes on each track, writing a random pattern, a complement of the first pattern, and finally another random pattern. This makes the original data unrecoverable even if the hard drives are removed from the control unit and may be used for sensitive data when the disks will be sold or scrapped.
  • The QUICKERASE function will use hardware ERASE commands to erase all records from each track in a minimum amount of time. QUICKERASE is usually sufficient to eradicate corporate data when the disks will be reused, such as at a disaster site.
  • The SIMERASE function will not erase any disks, but will validate your control statements and identify the disks that will be erased.
FDRERASE complies with the government National Computer Security Center (NCSC) guidelines for erasing computer disks. The ERASE function meets the NCSC definition for "clearing" a disk and the SECUREERASE function meets the NCSC definition for "purging" a disk.

The QUICKERASE function and the default form of the ERASE function transmit only a few bytes per track erased, so they can erase many disks concurrently without overloading the disk channels.

FDRERASE User Experience:
" We are a state government and our data includes financial, personnel, motor vehicle and other sensitive data, which must be erased after a DR test. A minimal INIT of the volume would wipe out the VTOC but leave the data on the disk, which is not acceptable to our auditors.ÊWe used to take 12 hours out of our 48-hour test time to completely erase the disks. We used the QUICKERASE function of FDRERASE and saved over 80% of that time, giving us 10 more hours to test. The disk subsystems were EMC 8430 Symmetrix model.

The Result: 612 3390-3 volumes took 83 minutes. Another set of 332 3390-3 volumes took 43 minutes and 18 3390-9 volumes took 9 minutes."

You can run a considerable number of concurrent erase functions with little increase in time-per-disk, but your elapsed time will vary depending on the type of subsystem and type of channels. FDRERASE can erase up to 64 disks concurrently in a single step, and up to 8190 volumes total per step.

The SECUREERASE and other non-default operations may take longer since FDRERASE must send more data down the channel for each track.

FDRERASE operates only on offline disks. You specify device address, or an address prefix (such as 1A* to do devices 1A00-1AFF); FDRERASE will identify the offline disk devices and erase only those volumes. For FDRPAS customers, FDRERASE will erase only FDRPAS source volumes (previously online), but it can be told to erase any offline disk.

Here is a sample FDRERASE jobstream:

 //ERASE EXEC PGM=FDRERASE,REGION=0M
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
ERASE TYPE=FULL,MAXTASKS=20
MOUNT ERASEUNIT=(1A*,1B*)
This sample jobstream for FDRERASE can be downloaded as file: FDRERASE.txt
As an example of the results, we used FDRDSF PRINT to print a track on a disk; before the erase, you can see the data on the track:
FDR520 PRINTING FROM DEVICE TYPE 3390-3 TO OUTPUT DDNAME TAPE1
FDR521 CYLINDER 00003 TRACK 0000 ------------------ RECORD ZERO 0003000000000008 -- DATA 0003000000000000 ------
FDR522 COUNT FIELD 0003000001002350
000000 4E4EE4E2 C5D9D4D6 C44DD3C6 F5F0F3F5 F65D4040 40404040 40404040 40404040 *..USERMOD.LF50356. *
000020 615C4040 40404040 40404040 40404040 40404040 40404040 40404040 40404040 *.. *
...

After an ERASE, the printout shows the erase record on the track; the original data is gone:

FDR520 PRINTING FROM DEVICE TYPE 3390-3 TO OUTPUT DDNAME TAPE1 FDR521 CYLINDER 00003 TRACK 0000 ------------------ RECORD ZERO 0003000000000008 -- DATA 0000000000000000 ------
FDR522 COUNT FIELD 000300000100DD58
000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 *...............................*
LINE 000020-00DD40 SAME AS ABOVE
*

FDRERASE takes offline disk addresses as input. You can also use FDREPORT to select offline
disks based on their volume serials and generate an FDRERASE step for those disks.
An example can be downloaded as file: FDREPORT_FDRERASE.txt