What's to say Iron mountain employee wasn't paid 50 bucks to hand the drives off to a third party?
There's all sorts of what if's here. Do you regularly provide the key to all your employees or do you keep it under tight wraps? At least one person needs to know what it is. This hasn't change from SED drives versus non-SED drives. You can also implement the two part keys with these drives where one employee only knows half the password, and the other employee knows the other half so both would have to be in cahoots with each other for it to be fully decrypted. Or split it out to 3, 4, or 5 parties if you really want to go crazy!
You can get a bit more info here, but there's lots more on the internet that you can read up on with regards to how these new drive types work:
http://en.wikipedia.org/wiki/Hardware-based_full_disk_encryption
-----Original Message-----
From: rob@xxxxxxxxx [mailto:rob@xxxxxxxxx]
Sent: Friday, February 22, 2013 12:32 PM
To: Midrange Systems Technical Discussion
Subject: RE: DISK Sanitizer Help
But then you run into what officially constitutes "destroy the disk".
There's still money involved.
Iron Mountain has shredders capable of shredding disk drives. They're bonded. So that should be acceptable.
The idea of tannerite and a .50cal may be effective but probably doesn't "officially" constitute "destroy the disk".
Then you get into the touchy feely green argument. Better to reuse then discard. IDK what hazards disk drives are to the landfill. Or if they are recyclable.
Besides, people preparing disk drives makes them available on the used market. Some people never buy a new car; some people never own current computer equipment.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: <brad.lovelady@xxxxxxxxxxxxxx>
To: <midrange-l@xxxxxxxxxxxx>,
Date: 02/22/2013 01:21 PM
Subject: RE: DISK Sanitizer Help
Sent by: midrange-l-bounces@xxxxxxxxxxxx
Rogers,
If management is dead set on re-selling these used disks, then Rob's
option would be the path of least resistance. However, as a fellow
"banker" I would not recommend you attempt to wholesale the disks. The
cheaper option in my case would be to destroy the disk and refurbish the
system and I/O. When you factor in the opportunity costs of your time,
plus cost of Disk Sanitizer, plus the time and cost of all the CYA
paperwork, plus the perceived risk of selling disk that once contained
restricted company data.....it's just not worth it. (Note: I said
perceived risk, not actual risk.) Those of you who deal with auditors
should understand my point.
If I had to guess that 2.5TB is comprised of 140GB drives which works out
to about 20 or so disk units. Used market price per unit would be about
$300-500, meaning the most you could expect from a reseller would be $200
per unit. All that said....if management asked me to do this I would turn
around and ask them if all that trouble and perceived risk was worth
$4000-5000?
***********************************
Bradford Lovelady
Operating Systems Engineer
Technology Infrastructure Services
Wells Fargo Bank l 200 Wildwood Pkwy l Birmingham, AL 35209
MAC W2691-010
Tel 205-938-1999 l Cell 205-826-2834
brad.lovelady@xxxxxxxxxxxxxx
Wells Fargo Confidential
This message may contain confidential and/or privileged information. If
you are not the addressee or authorized to receive this for the addressee,
you must not use, copy, disclose, or take any action based on this message
or any information herein. If you have received this message in error,
please advise the sender immediately by reply e-mail and delete this
message. Thank you for your cooperation.
-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [
mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Friday, February 22, 2013 8:10 AM
To: Midrange Systems Technical Discussion
Subject: Re: DISK Sanitizer Help
Nothing stopping you from deleting all partitions. Creating one partition
and assigning all resources to it. Install just the Lic and OS. Install
the disk sanitizer and go from there. This new partition should have 70
days of keys. Batteries on the disk cards shouldn't be a show stopper,
just make it run slower.
We have a 9117 MMA. (and two other power 6 boxes). And use HMC.
Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail
to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com
From: "Laine, Rogers" <Rogers.Laine@xxxxxxxxxxxxxxx>
To: "'midrange-l@xxxxxxxxxxxx'" <midrange-l@xxxxxxxxxxxx>,
Date: 02/22/2013 08:43 AM
Subject: DISK Sanitizer Help
Sent by: midrange-l-bounces@xxxxxxxxxxxx
Morning,
We have a 9117 MMA that has not been access in the past 12 months.
Now management would like to sell this equipment but the 2.5TB of disk
storage needs to be Sanitized before it can be sold.
Here are the issues I need to overcome.
1. The only access to the system is by using the HMC console.
2. The 4 partitions are not running because the product keys are
expired along with the QSECOFR id.
3. The batteries on the disk cards may be dead too, but I am not
sure.
4. We need to install IBM Disk Sanitizer for I5/OS because it is DOD
compliance.
5. The Hardware/Software is not longer under IBM support.
6. Using a outside vendor to help with this is not an option either.
Does anyone has any other ideas on how to proceed with the above
requirements.
Thanks,
Rogers
************************************************
This E-Mail transmission (and/or the documents accompanying it)
may contain information belonging to the sender which is confidential,
privileged and/or exempt from disclosure under applicable law. The
information is intended only for the use of the individual(s) or entity
named above. If you are not the intended recipient, you are hereby
notified that any disclosure, copying, distribution or the taking of any
action in reliance on the contents of this information is strictly
prohibited. If you have received this E-Mail transmission in error,
please immediately notify us by return E-Mail or telephone to arrange
for return of its contents including any documents.
midrange.com
