Re: DOD wipe of disks in a virtual environment.

VIOS doesn't support PowerHA :-)

On the smaller machines SAN storage is close but still more expensive than
internal.

Unfortunately deleting the NWSSTG doesn't guarantee the data is scrubbed
from the physical disks.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 8/27/2015 1:29 PM, Roberto José Etcheverry Romero wrote:

Or, move to a vios hosted model where the wipe is done at the storage

level....
I don't know how the costs compare between internal and external disks...
On Aug 27, 2015 2:14 PM, "Darryl Freinkel" <dhfreinkel@xxxxxxxxx> wrote:

I would imagine something like creating a new NWSSTG periodically and

copying the data to the new NWSSTG. That would leave behind deleted
files.
Then do a DLTNWSSTG.

You would have to do this on a regular basis.

My 2 cents worth.

Darryl.

Sent from my iPad

On Aug 27, 2015, at 11:38 AM, rob@xxxxxxxxx wrote:

So what you are asking for is a parameter on DLTNWSSTG similar to the
dod
parameter on this third party linux scrub command?
linux-a2f6:/media # scrub -p dod -f /dev/sda3
scrub: using DoD 5220.22-M patterns
scrub: please verify that device size below is correct!
scrub: scrubbing /dev/sda3 5371107840 bytes (~5GB)
scrub: 0x0 |................................................|
scrub: 0xff |................................................|
scrub: random |................................................|
scrub: 0x0 |................................................|
scrub: verify |................................................|

https://www.suse.com/communities/conversations/securely-erasing-partitions/

Let me know the results of the DCR.
PS: LUG meets the week of 9/21. I'm not a member. Perhaps you know
someone who is?

The "IBM i Security Guide" available at
http://www-03.ibm.com/systems/power/software/i/security/
mentions that DOD criteria but only in a reference link. No ties to
that
DOD spec and DLTNWSSTG specifically.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: DrFranken <midrange@xxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 08/27/2015 11:10 AM
Subject: DOD wipe of disks in a virtual environment.
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Here's a question I just got from my customers.

They have an i 7.2 host partition with a guest partition that contains
all their programs and data. ALL NWSSTG for the single guest partition
is in a PowerHA replicated iASP.

They have data from hundreds of customers on their system. All data is
in the guest partition with data in separate libraries and IFS
directories for each customer.

Here is the question:

"A customer is demanding that we wipe to DoD spec all disks that contain
their data when it is no longer needed. How do we do that?"

How indeed?

--

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.



--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--

This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.