Home / ubuntu / Questions / 785337
Accepted
m.a.a.
Asked: 2016-06-11 07:37:11 +0800 CST

secure erase returns input/output error

  • 772

I've already given a detailed description of my predicament in my previous question.
Now I've got this:

sudo hdparm --user-master u --security-erase my_password /dev/sda

returns: 

security_password: "my_password"


/dev/sda:

Issuing SECURITY_ERASE command, password="my_password", user=user

SECURITY_ERASE: Input/output error

What's going on?

password

2 Answers

  1. Best Answer

    FYI: unlocking a Kingston SSD by use of hdparm, after setting a user password appears to be impossible.

    NOTE: The drive will appear as locked next time you reboot after setting your password. Until then, security will only appear as enabled.

    Whether trying the very user-password you just set, or other variants, such as "", "NULL", NULL or a row of 32 spaces, either as a user-password or as a master-password, will not unlock your drive, but instead give you an Input/output error.

    sudo hdparm --user-master m --security-erase "" /dev/sda

    will, however, do the job (that's m as in master, since in Kingston's case the master-password is apparently NULL by default).

    The very same master password ("") that returns the Input/output error for the security-unlock command, works just fine with the security-erase command.

    So don't lock your ssd unless you really intend to erase it, 'cause it's far from certain whether you'll be able to unlock it.

    I've been reading reports of similar issues and I've even stumbled across a patch, which I have, however, not tested.

    • 3

  2. The --security-erase option presumes a drive that has already been locked with that password. I infer from your previous question that you just want a secure destruction of everything on the disk. This is how I do that:

    sudo su - 
cat /dev/urandom > /dev/sda

    Now wait (quite) a while for the "out of space" error. Disk sda is wiped, and very securely at that.

    If you are in a hurry and aren't paranoid,

    cat /dev/zero > /dev/sda

    will work just as well (really) and be many times faster.

    Optionally, run fdisk /dev/sda next and use the n command to add a new partition, accepting all the defaults to create a single big partition. But even if you skip this step, any OS install you do next will create the partition for you.

    • 1