Seagate ST1000NM0033 manual Data Encryption, Controlled Access, Random Number Generator RNG

Page 34

5.0ABOUT SELF-ENCRYPTING DRIVES

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, commonly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 2.15.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the computer, storage and digital communications industry. Seagate’s SED models comply with the standards published by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two ATA commands:

•Trusted Send

•Trusted Receive

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

5.1DATA ENCRYPTION

Encrypting drives use one inline encryption engine for each port, employing AES-256 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation and cannot be disabled.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 5.5).

5.2CONTROLLED ACCESS

The drive has two security providers (SPs) called the "Admin SP" and the "Locking SP." These act as gatekeepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

5.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 5.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Manufacutrers Secure ID) password.

5.2.2Locking SP

The Locking SP controls read/write access to the media and the cryptographic erase feature. Access to the Locking SP is available using the BandMasterX or EraseMaster passwords. Since the drive owner can define up to 16 data bands on the drive, each data band has its own password called BandMasterX where X is the number of the data band (0 through 15).

5.2.3Default password

When the drive is shipped from the factory, all passwords are set to the value of MSID. This 32-byte random value can only be read by the host electronically over the interface. After receipt of the drive, it is the responsibility of the owner to use the default MSID password as the authority to change all other passwords to unique owner-specified values.

5.3RANDOM NUMBER GENERATOR (RNG)

The drive has a 32-byte hardware RNG that it is uses to derive encryption keys or, if requested to do so, to provide random numbers to the host for system use, including using these numbers as Authentication Keys (passwords) for the drive’s Admin and Locking SPs.

5.4DRIVE LOCKING

In addition to changing the passwords, as described in Section 5.2.3, the owner should also set the data access controls for the individual bands.

30

CONSTELLATION ES.3 SERIAL ATA PRODUCT MANUAL, REV. A

Page 33 Page 35
Image 34
Page 33 Page 35
Contents Constellation ES.3 Serial ATA Document Revision History Contents Serial ATA Sata interface Seagate Technology Support Services Constellation ES.3 Serial ATA Product Manual, Rev. a Introduction About the Serial ATA Interface Drive Specifications Specification Summary TablesDrive specification Formatted Capacity LBA modeDefault Logical Geometry Recording and Interface TechnologyPower Specifications 4TB Drive DC power requirements Peak operating current sequential write3TB Drive DC power requirements 2TB Drive DC power requirements 1TB Drive DC power requirements Typical current profiles TB Typical 5V startup and operation current profileTypical current profiles Typical current profiles Typical current profiles Idle mode Power-management modesActive mode Sleep modeExtended Power Conditions PowerChoiceTM PowerChoice is invoked using one of two methodsPowerChoice Manufacture Default Power Condition Timer Values PowerChoice Supported Extended Power Condition IndentifiersEnvironmental Limits Acoustics Test for Prominent Discrete Tones PdtsReliability Electromagnetic ImmunityRadio frequency environments Agency Certification Corrosive Environment Environmental ProtectionChina Restriction of Hazardous Substances RoHS Directive Reference DocumentsStorage Product WarrantyShipping Product repair and return informationConfiguring the Drive Handling and STATIC-DISCHARGE PrecautionsSerial ATA Cables and Connectors Drive Mounting Mechanical specifications Mounting dimensions-top, side and end viewSeagate Enterprise SEDs PurposeLevel 2 security Random Number Generator RNG Controlled AccessData Encryption Drive LockingSupported Commands Authenticated Firmware DownloadPower Requirements Data BandsATA Security Erase Unit Command on SED Sata Drives RevertspSerial ATA connector pin definitions Serial ATA Device Plug Connector PIN DefinitionsHOT-PLUG Compatibility Supported ATA Commands Supported ATA commandsF6H Identify Device command CEHXxxx H Description if bit is set to BIT Word Set Features command Set Features command values3 S.M.A.R.T. commands M.A.R.T. commandsConstellation ES.3 Serial ATA Product MANUAL, REV. a Index Constellation ES.3 Serial ATA Product MANUAL, REV. a Index Constellation ES.3 Serial ATA Product MANUAL, REV. a Page Seagate Technology LLC
Related manuals
Manual 76 pages 29.86 Kb

ST1000NM0033 specifications

The Seagate ST1000NM0033 is a high-performance hard disk drive (HDD) designed specifically for enterprise applications. With a storage capacity of 1TB, it offers a balance of performance, reliability, and efficiency, making it suitable for data centers, cloud storage, and server environments. Built with Seagate's robust engineering, the ST1000NM0033 is ideal for handling heavy workloads and intensive data processes.

One of the standout features of this HDD is its rotational speed of 7200 RPM. This speed allows for quick data access and fast read/write operations, which is essential for data-intensive applications. The drive is equipped with 64MB of cache, further enhancing its efficiency by speeding up data retrieval for frequently accessed files.

Another key characteristic of the ST1000NM0033 is its SATA interface, which typically facilitates high-bandwidth data transfer rates. With a sustained data transfer rate of up to 160 MB/s, it ensures that large files, such as videos and databases, can be transferred swiftly, minimizing downtime and improving overall system performance.

The drive's durability is backed by Seagate’s Advanced Format technology, which enhances the format compatibility, storage efficiency, and reliability of the drive through improved error correction. With a mean time between failures (MTBF) rating of 1 million hours, users can trust the STA0033 to provide exceptional longevity and stability, critical in enterprise environments where data integrity is paramount.

Furthermore, the ST1000NM0033 supports various workload types due to its design optimized for multi-user environments. The drive can handle up to 180TB/year workload rate, making it capable of supporting applications with high data demand.

Environmentally, Seagate ensures that this model is energy efficient, contributing to reduced power consumption in enterprise settings. The drive operates effectively within a specified temperature range, ensuring that it remains operational under different environmental conditions.

In summary, the Seagate ST1000NM0033 is an excellent choice for businesses seeking a reliable, high-capacity HDD with robust performance features. Its combination of speed, efficiency, durability, and capacity positions it as a strong contender in the enterprise storage solutions market. With its extensive feature set, it continues to cater to the demanding needs of modern data centers and enterprise applications.
Top Page Image Contents