Re: Clear data on V3700 log files

Le 31/10/2023 à 16:11, Jim Oberholtzer a écrit :

Thanks Marc, but the auditors want it from the V3700 as they cannot speak
IBM i in any language.....

Mmmm, no more comment here :-)

We already drained the drives from the V3700 and pushed them to the flash
with DST.

I believe that all commands entered through an ssh session using CLI are available in the audit log. If using putty, you can also output all the ssh session content to a text file, if auditors accept that.

https://www.ibm.com/docs/en/v3700/7.8.1?topic=interface-audit-log-commands

Unfortunately I do not know of any way to format/initialize a volume. This step is done at volume creation time only, I think. If there are no more volumes using an array, you can try to play with chdrive command as there is a "task format" parameter.

https://www.ibm.com/docs/en/v3700/7.8.1?topic=commands-chdrive

You would have to show your auditors the relationship between the volume and the drives so that they can realize that formatting the drive has the wanted wiping action on the volumes!

Disclaimer : I never did that, I just googled a couple of IBM documentation site. Hopefully your V3700 is no longer used, so the risk to delete wrong data does no longer exist.

--
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects


On Tue, Oct 31, 2023 at 9:08 AM Marc Rauzier <marc.rauzier@xxxxxxxxx> wrote:

Le 31/10/2023 à 14:27, Jim Oberholtzer a écrit :

I need to clear the data on multiple V3700 units, (since replaced by

Flash)

and show the log files that report the data wipe. I cannot find anything
on Google or other search engines that do not go out of their way to keep
the data. I can remove the volumes but I have to prove they are wiped.

Suggestions?

Once attached to a dedicated partition (just for operations safety),
using SST, you can try to initiliaze and format them through SST

task #8 in
https://www.ibm.com/docs/en/i/7.5?topic=checklist-secure-data-erase-i

I don't know if there is a specific entry in system logs. In the past,
when I wrote a procedure for such a need, I was using screenshots
showing the volume serial numbers before the initialize operations, and
a couple of other screenshots at the beginning of the operation, and
immediately after. This was to prove that the proper disks were
initialized, and therefore wiped.

Our procedure was based to

https://www.ibm.com/support/pages/initialize-disk-drives-so-all-data-erased-system
document (they write "Configure all the disk drives by adding them into
system ASP (ASP 1). This writes zeroes on the disk drives so that only
the LIC is loaded.").

FYI, I remember an old RPQ
(
https://www.ibm.com/common/ssi/ShowDoc.wss?docURL=/common/ssi/rep_rp/3/ENUSP84513/index.html)

which was available several years ago and was able to write zeros on
unconfigured disks. But never used.

--
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
questions.