Seagate ST500NM0041 About self-encrypting drives, Data encryption, Controlled access, Admin SP

Page 51

9.0About self-encrypting drives

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, com- monly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 3.2.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the com- puter, storage and digital communications industry. Seagate’s SED models comply with the standards pub- lished by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two SCSI commands:

•Security Protocol Out

•Security Protocol In

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

9.1Data encryption

Encrypting drives use one inline encryption engine for each port, employing AES-256 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation and cannot be disabled.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 9.5).

9.2Controlled access

The drive has two security providers (SPs) called the "Admin SP" and the "Locking SP." These act as gate- keepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

9.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 9.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Manufacturers Secure ID) password.

9.2.2Locking SP

The Locking SP controls read/write access to the media and the cryptographic erase feature. Access to the Locking SP is available using the BandMasterX or EraseMaster passwords. Since the drive owner can define up to 16 data bands on the drive, each data band has its own password called BandMasterX where X is the number of the data band (0 through 15).

Constellation ES.1 SAS Product Manual, Rev. E

43

Downloaded from www.Manualslib.com manuals search engine

Page 50 Page 52
Image 51
Page 50 Page 52
Contents ST1000NM0041 ST500NM0041 Standard Models Self-Encrypting Drive ModelsSED Fips 140-2 Models ST2000NM0041 Revision history Contents Interface requirements Defect and error managementInstallation About Fips About self-encrypting drivesPage Constellation ES.1 SAS Product Manual, Rev. E List of Figures Constellation ES.1 SAS Product Manual, Rev. E Seagate Online Support and Services Seagate Technology support servicesModel Number Self-Encrypting Drive SED Fips 140-2 Level ScopeElectromagnetic susceptibility Applicable standards and reference documentationStandards Electromagnetic compatibilityKorean KCC Electromagnetic complianceElectromagnetic compliance for the European Union Australian C-TickChina Restriction of Hazardous Substances RoHS Directive European Union Restriction of Hazardous Substances RoHSSelf-Encrypting Drives Reference Manual Reference documentsGeneral description Standard features Media descriptionPerformance Programmable drive capacity Factory-installed optionsReliability Formatted capacitiesAccess time Performance characteristicsInternal drive characteristics Seek performance characteristicsStart/stop time General performance characteristicsCache operation Prefetch/multi-segmented cache controlPrefetch operation Caching write dataUnrecoverable Errors Reliability specificationsError rates Recoverable ErrorsPreventive maintenance Reliability and serviceSeek errors Interface errorsReporting control 4 S.M.A.R.TControlling S.M.A.R.T Performance impactTemperature Log Page 0Dh Parameter Code Description Predictive failuresThermal monitor Implementation State of the drive prior to testingDrive Self Test DST DST failure definitionLog page entries Short and extended testsShort test Function Code 001b Extended test Function Code 010bProduct repair and return information Product warrantyShipping StoragePhysical/electrical specifications PowerChoiceTM power managementPowerChoice modes DC power requirements AC power requirementsRegulation ±5% Constellation ES.1 SAS Product Manual, Rev. E Constellation ES.1 SAS Product Manual, Rev. E General DC power requirement notes Power sequencingConducted noise immunity TB model current profiles Current profilesConstellation ES.1 SAS Product Manual, Rev. E GB model current profiles 2TB models in 3Gb operation Power dissipation2TB models in 6Gb operation 1TB models in 3Gb operation 1TB models in 6Gb operation 500GB models in 3Gb operation 500GB models in 6Gb operation Temperature a. Operating Environmental limitsRelative humidity Effective altitude sea level a. Operating Shock and vibrationShock Recommended mounting Vibration a. Operating-normalAir cleanliness AcousticsCorrosive environment Mounting configuration dimensions Mechanical specificationsSeagate Enterprise SED About FipsPurpose Validation ProgramExample of Fips tamper evidence labels Data encryption Controlled accessAdmin SP About self-encrypting drivesData bands Authenticated firmware downloadRandom number generator RNG Drive lockingRevertSP Power requirementsSupported commands Sanitize Cryptographic EraseDefect and error management Drive internal defects/errorsDrive error recovery procedures SAS system errors Background Media Scan Media Pre-ScanDeferred Auto-Reallocation Levels of PI Setting and determining the current Type LevelIdle Read After Write Protection Information PIIdentifying a Protection Information drive Drive orientation InstallationAir flow CoolingGrounding Drive mountingInterface requirements SAS featuresDual port support Supported commands Scsi commands supportedSupported commands Supported commands Supported commands Mode Sense data Inquiry dataConstellation ES.1 inquiry data Page Mode Sense data changeable and default values for 2TB drives Mode Sense data changeable and default values for 1TB drives 3a 38 60 30 00 00 02 Miscellaneous operating features and conditions Miscellaneous featuresMiscellaneous status SAS physical interface Datum B Section C C Section a a Pin descriptions Physical characteristicsConnector requirements Electrical descriptionReady LED Out Signal characteristicsPower SAS transmitters and receiversGeneral interface characteristics SAS-2 Specification ComplianceLED drive signal Differential signalsConstellation ES.1 SAS Product Manual, Rev. E Numerics IndexKCC Msid Mtbf See also cooling Page Constellation ES.1 SAS Product Manual, Rev. E Page Americas Seagate Technology LLC

ST2000NM0001, ST1000NM0041, ST500NM0001, ST2000NM0021, ST1000NM0021 specifications

Seagate is a renowned leader in data storage solutions, offering a wide array of hard disk drives (HDDs) suitable for various applications. Among their product lineup, the Seagate ST2000NM0041, ST500NM0021, ST500NM0041, ST1000NM0001, and ST1000NM0021 stand out as reliable options tailored for enterprise environments and general storage needs.

The Seagate ST2000NM0041 is a 2TB 7200 RPM drive designed for high-performance workloads in data centers. One of its key features is the use of the SATA III interface, providing data transfer speeds of up to 6 Gbps, ensuring quick access to data. This model supports advanced error recovery controls and features enhanced power management capabilities, which contribute to its reliable performance and energy efficiency.

Next, the ST500NM0021 and ST500NM0041 are both 500GB drives that cater to different consumer needs. The ST500NM0021 is a 5400 RPM drive, typically used in scenarios where lower power consumption is vital, such as in compact systems or external storage configurations. Its efficient design enables quieter operation, making it ideal for environments that require minimal noise. Conversely, the ST500NM0041 operates at a speed of 7200 RPM, making it suitable for more demanding applications that require swift read and write speeds. Both models utilize Serial ATA for connectivity, ensuring compatibility with a wide range of systems.

The ST1000NM0001 and ST1000NM0021 are 1TB drives that provide versatility across different platforms. Similar to their 500GB counterparts, the ST1000NM0001 features a 7200 RPM speed, optimizing performance for applications requiring faster data processing. In contrast, the ST1000NM0021 operates at 5400 RPM, designed for users prioritizing energy efficiency over speed, like in desktop and external storage solutions. Each of these drives supports advanced technologies such as Native Command Queuing (NCQ), which enhances performance by allowing multiple commands to be executed simultaneously.

Overall, the Seagate ST series hard drives offer flexible storage options for a variety of applications. With their robust features, including varied RPM speeds, power management, and compatibility with SATA connections, these drives cater to the needs of both consumer and enterprise markets, establishing Seagate as a trusted provider in the storage arena.
Top Page Image Contents