Seagate ST9600205SS About self-encrypting drives, Data encryption, Controlled access, Admin SP

Page 53

9.0About self-encrypting drives

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, com- monly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 3.2.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the com- puter, storage and digital communications industry. Seagate’s SED models comply with the standards pub- lished by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two SCSI commands:

•Security Protocol Out

•Security Protocol In

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

9.1Data encryption

Encrypting drives use one inline encryption engine for each port, employing AES-256 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation, cannot be disabled, and do not detract in any way from the performance of the drive.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 9.5).

9.2Controlled access

The drive has two security partitions (SPs) called the "Admin SP" and the "Locking SP." These act as gate- keepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

9.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 9.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Makers Secure ID) password.

Savvio 10K.5 SAS Product Manual, Rev. D

45

Page 52 Page 54
Image 53
Page 52 Page 54
Contents SED Fips 140-2 Models ST9900605SS ST9600005SS ST9450205SS ST9300405SSStandard Models Self-Encrypting Drive Models Revision Date Sheets affected or comments Revision historyContents Installation Defect and error managementAbout Fips About self-encrypting drives Interface requirementsPage Savvio 10K.5 SAS Product Manual, Rev. D List of Figures Page Seagate Online Support and Services Seagate Technology support servicesStandard models Standard SED models SED Fips 140-2 models ScopeStandards Applicable standards and reference documentationElectromagnetic compatibility Electromagnetic susceptibilityElectromagnetic compliance for the European Union Electromagnetic complianceAustralian C-Tick Korean KCCChina Restriction of Hazardous Substances RoHS Directive Reference documentsGeneral description Performance Standard featuresMedia description Reliability Factory-installed optionsFormatted capacities Programmable drive capacityInternal drive characteristics Performance characteristicsSeek performance characteristics Access timeStart/stop time General performance characteristicsCache operation Prefetch/multi-segmented cache controlPrefetch operation Caching write dataError rates Reliability specificationsRecoverable Errors Unrecoverable ErrorsSeek errors Reliability and serviceInterface errors Preventive maintenanceControlling S.M.A.R.T 4 S.M.A.R.TPerformance impact Reporting controlThermal monitor Temperature Log Page 0Dh Parameter Code DescriptionPredictive failures Drive Self Test DST State of the drive prior to testingDST failure definition ImplementationShort test Function Code 001b Short and extended testsExtended test Function Code 010b Log page entriesShipping Product warrantyStorage Product repair and return informationPowerChoiceTM power management Physical/electrical specificationsPowerChoice modes Mode DescriptionDC power requirements AC power requirements0Gb mode Amps 900GB standard drive DC power requirements600GB standard drive DC power requirements 450GB standard model DC power requirements 300GB standard model DC power requirements Conducted noise immunity General DC power requirement notesPower sequencing Current profiles for 900GB models Current profilesCurrent profiles for 600GB models Current profiles for 450GB models Current profiles for 300GB models GB models in 3Gb operation Power dissipation900GB models in 6Gb operation GB models in 3Gb operation 600GB models in 6Gb operation 450GB models in 3Gb operation 450GB models in 6Gb operation 300GB models in 3Gb operation 300GB models in 6Gb operation Temperature a. OperatingEnvironmental limits Shock and vibration Relative humidityEffective altitude sea level a. Operating Recommended mounting ShockCorrosive environment Air cleanlinessVibration a. Operating-normal Acoustics Mounting configuration dimensions Mechanical specificationsLevel 2 security About FipsPurpose Admin SP Controlled accessAbout self-encrypting drives Data encryptionDrive locking Random number generator RNGData bands Cryptographic erasePower requirements Authenticated firmware downloadSupported commands RevertSPDrive error recovery procedures Defect and error managementDrive internal defects/errors Background Media Scan SAS system errorsIdle Read After Write Media Pre-ScanDeferred Auto-Reallocation Protection Information PI Setting and determining the current Type LevelLevels of PI Identifying a Protection Information drivePhysical interface InstallationCooling Drive orientationGrounding Drive mountingInterface requirements SAS featuresSupported commands Scsi commands supportedCommand name Command code Supported Dual port supportSupported commands Supported commands Supported commands Bytes Data hex Inquiry dataSavvio inquiry data Mode Sense data Mode Pages Mode Sense data for 900GB drivesMode Sense data for 600GB drives Mode Sense values for 450GB drives Mode Sense values for 300GB drives Miscellaneous features Miscellaneous operating features and conditionsSupported Feature or condition Miscellaneous statusSAS physical interface Datum B Section C C Section a a Connector requirements Physical characteristicsElectrical description Pin descriptionsPower Signal characteristicsSAS transmitters and receivers Ready LED OutLED drive signal SAS-2 Specification complianceDifferential signals General interface characteristicsNumerics IndexPage Msid Mtbf See also cooling Page Savvio 10K.5 SAS Product Manual, Rev. D Page Seagate Technology LLC

ST9600005SS, ST9600205SS, ST9300505SS, ST9300605SS, ST9300405SS specifications

Seagate has long been a prominent player in the storage solutions market, offering a range of hard drives that cater to various needs and applications. Among its extensive lineup, the Seagate ST9600105SS, ST9450405SS, ST9450305SS, ST9900605SS, and ST9900805SS stand out due to their unique features and robust performance, making them suitable for both personal and professional use.

The Seagate ST9600105SS is a 2.5-inch 600GB SAS hard drive that delivers exceptional reliability and performance. With a rotational speed of 10,000 RPM, this drive ensures quick data access through its enhanced data transfer rate. It utilizes a SAS 6Gb/s interface, allowing for fast and efficient data management in enterprise environments. The drive is designed with Seagate's AgileArray technology, which optimizes drive reliability for multi-drive environments, ensuring that users benefit from reduced downtime.

Similarly, the ST9450405SS and ST9450305SS are also 2.5-inch SAS drives, offering capacities of 450GB and 300GB, respectively. Both models feature a 10,000 RPM speed and a 6Gb/s SAS interface, making them ideal for use in data centers and business-critical applications. The ST9450405SS has enhanced power efficiency, aiding in lowering operational costs for enterprises. Both drives incorporate Seagate's advanced error recovery controls, which help maintain data integrity under varying workloads.

On the larger capacity side, the Seagate ST9900605SS and ST9900805SS drives provide even more storage options. Offering 600GB and 800GB capacities, respectively, these drives are designed for high-performance computing environments. They also spin at 10,000 RPM and support the 6Gb/s SAS interface. The ST9900805SS, in particular, is noted for its advanced performance in transactional workloads, making it suitable for database storage, virtualization, and analytics.

All five models feature Seagate’s innovative technologies, including firmware enhancements for improved error correction and reliability. They are also built to operate in a variety of environments, offering robust vibration tolerance.

In summary, the Seagate ST9600105SS, ST9450405SS, ST9450305SS, ST9900605SS, and ST9900805SS represent some of the best storage solutions for high-demand applications. With their emphasis on performance, reliability, and energy efficiency, these drives are engineered to meet the challenges of modern data storage needs, ensuring organizations can rely on them for their critical operations.
Top Page Image Contents