2018-07-29 09:10:54

by Jeff Chua

[permalink] [raw]
Subject: How to secure erase PCI-E NVME SSD connected via USB3?

I'm testing the USB3-to-PCI-E NVME SSD. It's works using uas module,
recognized it as /dev/sda.

Since it's an USB device, the nvme-cli tools won't work, nor does
hdparm, as it's a NVME SSD.

So, how to secure-erase the NVME SSD connected via the JMS583 chip?

Thanks,
Jeff.


2018-07-31 11:08:57

by Ming Lei

[permalink] [raw]
Subject: Re: How to secure erase PCI-E NVME SSD connected via USB3?

On Sun, Jul 29, 2018 at 5:09 PM, Jeff Chua <[email protected]> wrote:
> I'm testing the USB3-to-PCI-E NVME SSD. It's works using uas module,
> recognized it as /dev/sda.
>
> Since it's an USB device, the nvme-cli tools won't work, nor does
> hdparm, as it's a NVME SSD.
>
> So, how to secure-erase the NVME SSD connected via the JMS583 chip?

You may try 'blkdiscard --secure' and see if you are luck.

Thanks,
Ming Lei

2018-08-01 05:07:13

by Jeff Chua

[permalink] [raw]
Subject: Re: How to secure erase PCI-E NVME SSD connected via USB3?

On Tue, Jul 31, 2018 at 7:07 PM, Ming Lei <[email protected]> wrote:
> On Sun, Jul 29, 2018 at 5:09 PM, Jeff Chua <[email protected]> wrote:
>> I'm testing the USB3-to-PCI-E NVME SSD. It's works using uas module,
>> recognized it as /dev/sda.
>>
>> Since it's an USB device, the nvme-cli tools won't work, nor does
>> hdparm, as it's a NVME SSD.
>>
>> So, how to secure-erase the NVME SSD connected via the JMS583 chip?
>
> You may try 'blkdiscard --secure' and see if you are luck.

Interesting, will try that.

Thanks for the pointer.

Jeff.

2018-08-01 14:53:44

by Jeff Chua

[permalink] [raw]
Subject: Re: How to secure erase PCI-E NVME SSD connected via USB3?

On Wed, Aug 1, 2018 at 1:02 PM, Jeff Chua <[email protected]> wrote:
> On Tue, Jul 31, 2018 at 7:07 PM, Ming Lei <[email protected]> wrote:
>> On Sun, Jul 29, 2018 at 5:09 PM, Jeff Chua <[email protected]> wrote:
>>> I'm testing the USB3-to-PCI-E NVME SSD. It's works using uas module,
>>> recognized it as /dev/sda.
>>>
>>> Since it's an USB device, the nvme-cli tools won't work, nor does
>>> hdparm, as it's a NVME SSD.
>>>
>>> So, how to secure-erase the NVME SSD connected via the JMS583 chip?
>>
>> You may try 'blkdiscard --secure' and see if you are luck.
>
> Interesting, will try that.

# blkdiscard --secure /dev/sda
blkdiscard: /dev/sda: BLKSECDISCARD ioctl failed: Operation not supported

# hdparm --user-master u --security-erase p /dev/sda
(returns immediately and does nothing).

I've tried hdparm on an SSD connected via USB3 and it secure-erased ok.

Anyone working on this?

Thanks,
Jeff

2018-08-02 12:31:17

by Alan Cox

[permalink] [raw]
Subject: Re: How to secure erase PCI-E NVME SSD connected via USB3?

> # hdparm --user-master u --security-erase p /dev/sda
> (returns immediately and does nothing).
>
> I've tried hdparm on an SSD connected via USB3 and it secure-erased ok.
>
> Anyone working on this?

Sounds to me like you need to contact the vendor of the interface in
question. If it accepted a security erase command and didn't do it then
it's broken. It's at liberty to refuse it, or report it doesn't know what
you are talking about, but if it just returned and after re-plugging the
device its still using the old keys then it or the device is busted and
it's not something the OS can do much about.

Alan

2018-08-02 12:58:24

by Jeff Chua

[permalink] [raw]
Subject: Re: How to secure erase PCI-E NVME SSD connected via USB3?

On Thu, Aug 2, 2018 at 8:29 PM, Alan Cox <[email protected]> wrote:
>> # hdparm --user-master u --security-erase p /dev/sda
>> (returns immediately and does nothing).
>>
>> I've tried hdparm on an SSD connected via USB3 and it secure-erased ok.
>>
>> Anyone working on this?
>
> Sounds to me like you need to contact the vendor of the interface in
> question. If it accepted a security erase command and didn't do it then
> it's broken. It's at liberty to refuse it, or report it doesn't know what
> you are talking about, but if it just returned and after re-plugging the
> device its still using the old keys then it or the device is busted and
> it's not something the OS can do much about.

Alan,

You're right. I wrote to JMicron, and they are kind to reply that
"hdparm not support secure-erase feature with USB to NVMe device", and
told me to plug the card into a PCI slot to perform the
security-erase.

I'm asking JMicron again if the JMS583 even support security-erase.

Thanks,
Jeff