Seagate ST3000NM0023 About self-encrypting drives, Data encryption, Controlled access, Admin SP

Page 50

9.0About self-encrypting drives

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, com- monly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 3.2.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the com- puter, storage and digital communications industry. Seagate’s SED models comply with the standards pub- lished by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two SCSI commands:

•Security Protocol Out

•Security Protocol In

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

9.1Data encryption

Encrypting drives use one inline encryption engine for each port, employing AES-128 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation, cannot be disabled, and do not detract in any way from the performance of the drive.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 9.5).

9.2Controlled access

The drive has two security partitions (SPs) called the "Admin SP" and the "Locking SP." These act as gate- keepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

9.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 9.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Makers Secure ID) password.

42

Constellation ES Series SAS Product Manual, Rev. F

Page 49 Page 51
Image 50
Page 49 Page 51
Contents SED Fips 140-2 Models ST32000446SS ST31000426SS ST3500416SSStandard Models Self-Encrypting Drive Models Revision history Contents About Fips About self-encrypting drives Defect and error managementInstallation Interface requirementsPower Constellation ES Series SAS Product Manual, Rev. F List of Figures Constellation ES Series SAS Product Manual, Rev. F Seagate Technology support services Seagate Online Support and ServicesScope Electromagnetic compatibility Applicable standards and reference documentationStandards Electromagnetic susceptibilityAustralian C-Tick Electromagnetic complianceElectromagnetic compliance for the European Union Korean KCCReference documents European Union Restriction of Hazardous Substances RoHSGeneral description Standard features Media descriptionFormatted capacities PerformanceReliability Programmable drive capacityFactory-installed options Seek performance characteristics Performance characteristicsInternal drive characteristics Access timeGeneral performance characteristics Start/stop timePrefetch/multi-segmented cache control Cache operationCaching write data Prefetch operationRecoverable Errors Reliability specificationsError rates Unrecoverable ErrorsInterface errors Reliability and serviceSeek errors Preventive maintenancePerformance impact 4 S.M.A.R.TControlling S.M.A.R.T Reporting controlThermal monitor Temperature Log Page 0Dh Parameter Code DescriptionPredictive failures DST failure definition State of the drive prior to testingDrive Self Test DST ImplementationExtended test Function Code 010b Short and extended testsShort test Function Code 001b Log page entriesProduct repair and return information Product warrantyShipping PowerChoice modes Physical/electrical specificationsPowerChoiceTM power management AC power requirements DC power requirementsRegulation ±5% Constellation ES Series SAS Product Manual, Rev. F +5V Conducted noise immunity General DC power requirement notesPower sequencing Current profiles TB model current profilesConstellation ES Series SAS Product Manual, Rev. F GB model current profiles Power dissipation 2TB models in 3Gb operation2TB models in 6Gb operation 1TB models in 3Gb operation 1TB models in 6Gb operation Os per Second ST3500414SS CURRENT/POWER vs Throughput SAS 3.0GB500GB models in 3Gb operation 500GB models in 6Gb operation Relative humidity Temperature a. OperatingEnvironmental limits Shock Effective altitude sea level a. OperatingShock and vibration Vibration a. Operating-normal Recommended mountingCorrosive environment Air cleanlinessAcoustics Mechanical specifications Mounting configuration dimensionsLevel 2 security About FipsPurpose About self-encrypting drives Controlled accessAdmin SP Data encryptionDrive locking Default passwordRandom number generator RNG Data bandsSupported commands Authenticated firmware downloadPower requirements Cryptographic eraseDrive error recovery procedures Defect and error managementDrive internal defects/errors SAS system errors Deferred Auto-Reallocation Background Media ScanMedia Pre-Scan Idle Read After Write Installation Drive orientationCooling Air flowDrive mounting GroundingSAS features Interface requirementsDual port support Scsi commands supported Supported commandsSupported commands Supported commands Supported commands Constellation ES inquiry data Mode Sense dataInquiry data Page Mode Sense data changeable and default values for 2TB drives Mode Sense data changeable and default values for 1TB drives 3a 38 60 30 00 00 02 Miscellaneous status Miscellaneous operating features and conditionsMiscellaneous features SAS physical interface Datum B Section C C Section a a Electrical description Physical characteristicsConnector requirements Pin descriptionsSAS transmitters and receivers Signal characteristicsPower Ready LED OutDifferential signals SAS-2 Specification ComplianceLED drive signal General interface characteristicsConstellation ES Series SAS Product Manual, Rev. F Index NumericsKCC Msid Mtbf See also cooling Page Constellation ES Series SAS Product Manual, Rev. F Page Seagate Technology LLC

ST4000NM0053, ST4000NM0023, ST32000444SSIM, ST32000646NS, ST3000NM0063 specifications

Seagate is a prominent name in the storage industry, renowned for its high-performance hard disk drives (HDDs). Among its popular enterprise offerings are models like the ST2000NM0043, ST32000645NS, ST3000NM0043, ST2000NM0033, and ST2000NM0023, which cater to various data center and server needs.

The Seagate ST2000NM0043 is a 2TB 7200 RPM SATA drive designed for high availability and performance in enterprise environments. It features a 128MB cache, ensuring efficient data transfer speeds and quick access to frequently used data. This model boasts a mean time between failures (MTBF) of 1.4 million hours, emphasizing its reliability for continuous operation in demanding applications.

The ST32000645NS, offering 2TB of storage and a 7200 RPM spindle speed, is ideal for environments where large amounts of data need to be stored and accessed quickly. It supports SAS interfaces, providing enhanced data integrity and improved system performance. With its aggressive power management features, this model strikes a balance between performance and energy efficiency, making it suitable for both traditional data centers and cloud applications.

The ST3000NM0043 stands out with a capacity of 3TB, further addressing the growing need for more substantial storage solutions. Like its counterparts, it operates at 7200 RPM and is equipped with advanced caching mechanisms that help enhance overall performance. Its high durability and enterprise-grade features make it a preferred choice for storage-intensive applications.

The ST2000NM0033 focuses on delivering storage solutions for environments needing both capacity and reliability. With its 2TB capacity and 7200 RPM rotation speed, it provides an effective solution for businesses looking to balance workload and storage needs without compromising performance. This model also features Seagate's advanced technology that optimizes workflow and minimizes latency.

Lastly, the ST2000NM0023 mirrors many of the features found in its siblings, offering a 2TB capacity and optimized for high reliability and performance. With Seagate's commitment to innovating in the HDD space, features such as self-monitoring, analysis, and reporting technology (SMART) help maintain the drive's health and prevent potential failures.

In conclusion, Seagate's range of HDDs, exemplified by the ST2000NM0043, ST32000645NS, ST3000NM0043, ST2000NM0033, and ST2000NM0023, reflects a dedication to providing robust, high-capacity storage solutions. Their advanced technologies, reliability ratings, and performance features make them ideal choices for enterprise environments demanding efficiency and durability.
Top Page Image Contents