Seagate ST1000NM0033 manual About SELF-ENCRYPTING Drives, Data Encryption, Controlled Access

Page 44

8.0ABOUT SELF-ENCRYPTING DRIVES

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, commonly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 2.2.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the computer, storage and digital communications industry. Seagate’s SED models comply with the standards published by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two SCSI commands:

•Security Protocol Out

•Security Protocol In

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

8.1DATA ENCRYPTION

Encrypting drives use one inline encryption engine for each port, employing AES-256 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation and cannot be disabled.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 8.5).

8.2CONTROLLED ACCESS

The drive has two security providers (SPs) called the "Admin SP" and the "Locking SP." These act as gatekeepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

8.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 8.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Manufacturers Secure ID) password.

8.2.2Locking SP

The Locking SP controls read/write access to the media and the cryptographic erase feature. Access to the Locking SP is available using the BandMasterX or EraseMaster passwords. Since the drive owner can define up to 16 data bands on the drive, each data band has its own password called BandMasterX where X is the number of the data band (0 through 15).

8.2.3Default password

When the drive is shipped from the factory, all passwords are set to the value of MSID. This 32-byte random value can only be read by the host electronically over the interface. After receipt of the drive, it is the responsibility of the owner to use the default MSID password as the authority to change all other passwords to unique owner-specified values.

8.3RANDOM NUMBER GENERATOR (RNG)

The drive has a 32-byte hardware RNG that it is uses to derive encryption keys or, if requested to do so, to provide random numbers to the host for system use, including using these numbers as Authentication Keys (passwords) for the drive’s Admin and Locking SPs.

8.4DRIVE LOCKING

In addition to changing the passwords, as described in Section 8.2.3, the owner should also set the data access controls for the individual bands.

The variable "LockOnReset" should be set to "PowerCycle" to ensure that the data bands will be locked if power is lost. In addition "ReadLockEnabled" and "WriteLockEnabled" must be set to true in the locking table in order for the bands "LockOnReset" setting of "PowerCycle" to actually lock access to the band when a "PowerCycle" event occurs. This scenario occurs if the drive is removed from its cabinet. The drive will not honor any data read or write requests until the bands have been unlocked. This prevents the user data from being accessed without the appropriate credentials when the drive has been removed from its cabinet and installed in another system.

CONSTELLATION ES.3 SAS PRODUCT MANUAL, REV. B

39

Page 43 Page 45
Image 44
Page 43 Page 45
Contents Constellation ES.3 SAS Document Revision History Contents Installation Contents Seagate Technology Support Services Scope SEDApplicable Standards and Reference Documentation StandardsAustralian C-Tick Korean KCCTaiwanese Bsmi European Union Restriction of Hazardous Substances RoHSChina Restriction of Hazardous Substances RoHS Directive Reference DocumentsGeneral Description Performance Standard FeaturesMedia Description FACTORY-INSTALLED Options ReliabilityFormatted Capacities Programmable Drive CapacityPerformance Characteristics Internal Drive CharacteristicsFormat command execution time for 512-byte sectors minutes General performance characteristicsCache Operation START/STOP TimePREFETCH/MULTI-SEGMENTED Cache Control Caching write data Prefetch operationReliability and Service Reliability SpecificationsError Rates Hot plugging the drive 3 S.M.A.R.TControlling S.M.A.R.T Performance impactReporting control Determining rateState of the drive prior to testing Drive Self Test DSTDST failure definition ImplementationInvoking DST Short and extended testsShort test Function Code 001b Extended test Function Code 010bProduct warranty ShippingStorage Product repair and return informationPowerChoice modes PHYSICAL/ELECTRICAL SpecificationsPowerchoicetm Power Management AC Power Requirements DC Power Requirements4TB drive DC power requirements 3TB drive DC power requirements 2TB drive DC power requirements 1TB drive DC power requirements Conducted noise immunity General DC power requirement notesPower sequencing Current profiles TB model current profilesTB model current profiles TB model current profiles TB model current profiles 4TB models in 6Gb operation Power Dissipation4TB models in 3Gb operation 3TB models in 3Gb operation 3TB models in 6Gb operation2TB models in 3Gb operation 2TB models in 6Gb operation1TB models in 3Gb operation 1TB models in 6Gb operationTemperature a. Operating Environmental LimitsImage is for reference only, may not represent actual drive Relative humidityShock and vibration ShockRecommended mounting Air cleanliness VibrationAcoustics Corrosive environmentMechanical Specifications 1TBPurpose Validation ProgramSeagate Enterprise SED Security LevelControlled Access About SELF-ENCRYPTING DrivesData Encryption Random Number Generator RNGAuthenticated Firmware Download Power RequirementsSupported Commands Data BandsDrive Error Recovery Procedures Defect and Error ManagementDrive Internal DEFECTS/ERRORS SAS System Errors Background Media ScanMedia PRE-SCAN Deferred AUTO-REALLOCATIONIdle Read After Write Protection Information PISetting and determining the current Type Level Identifying a Protection Information driveCooling InstallationDrive Orientation Drive Mounting X = F 15lb = 67NGrounding SAS Features Interface RequirementsTask management functions Task management responsesScsi Commands Supported Supported commands Supported commands Supported commands Inquiry data Constellation ES.3 inquiry dataMode Sense data Block Descriptor CHG 9C 0A 9D 0F FF FF FF FF FF FF FF FF DEF 12 1400 FF FF 00 00 FF FF FF FF 80 20 00 00 00 00 00 Miscellaneous Operating Features and Conditions Miscellaneous featuresSAS physical interface Datum B Section C C Section a a Physical characteristics Connector requirementsElectrical description Pin descriptionsPower Signal CharacteristicsSAS transmitters and receivers Ready LED OutAdditional Information Differential signalsSAS-2 Specification Compliance Index Page KCC See also cooling Page Seagate Technology LLC
Related manuals
Manual 52 pages 18.94 Kb

ST1000NM0033 specifications

The Seagate ST1000NM0033 is a high-performance hard disk drive (HDD) designed specifically for enterprise applications. With a storage capacity of 1TB, it offers a balance of performance, reliability, and efficiency, making it suitable for data centers, cloud storage, and server environments. Built with Seagate's robust engineering, the ST1000NM0033 is ideal for handling heavy workloads and intensive data processes.

One of the standout features of this HDD is its rotational speed of 7200 RPM. This speed allows for quick data access and fast read/write operations, which is essential for data-intensive applications. The drive is equipped with 64MB of cache, further enhancing its efficiency by speeding up data retrieval for frequently accessed files.

Another key characteristic of the ST1000NM0033 is its SATA interface, which typically facilitates high-bandwidth data transfer rates. With a sustained data transfer rate of up to 160 MB/s, it ensures that large files, such as videos and databases, can be transferred swiftly, minimizing downtime and improving overall system performance.

The drive's durability is backed by Seagate’s Advanced Format technology, which enhances the format compatibility, storage efficiency, and reliability of the drive through improved error correction. With a mean time between failures (MTBF) rating of 1 million hours, users can trust the STA0033 to provide exceptional longevity and stability, critical in enterprise environments where data integrity is paramount.

Furthermore, the ST1000NM0033 supports various workload types due to its design optimized for multi-user environments. The drive can handle up to 180TB/year workload rate, making it capable of supporting applications with high data demand.

Environmentally, Seagate ensures that this model is energy efficient, contributing to reduced power consumption in enterprise settings. The drive operates effectively within a specified temperature range, ensuring that it remains operational under different environmental conditions.

In summary, the Seagate ST1000NM0033 is an excellent choice for businesses seeking a reliable, high-capacity HDD with robust performance features. Its combination of speed, efficiency, durability, and capacity positions it as a strong contender in the enterprise storage solutions market. With its extensive feature set, it continues to cater to the demanding needs of modern data centers and enterprise applications.
Top Page Image Contents