Seagate ST9450404SS About self-encrypting drives, Data encryption, Controlled access, Admin SP

Page 47

9.0About self-encrypting drives

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, com- monly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 3.2.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the com- puter, storage and digital communications industry. Seagate’s SED models comply with the standards pub- lished by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two SCSI commands:

•Security Protocol Out

•Security Protocol In

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

9.1Data encryption

Encrypting drives use one inline encryption engine for each port, employing AES-128 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation, cannot be disabled, and do not detract in any way from the performance of the drive.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 9.5).

9.2Controlled access

The drive has two security partitions (SPs) called the "Admin SP" and the "Locking SP." These act as gate- keepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

9.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 9.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Makers Secure ID) password.

Savvio 10K.4 SAS Product Manual, Rev. E

39

Page 46 Page 48
Image 47
Page 46 Page 48
Contents SED Fips 140-2 Models ST9600204SSST9600104SS ST9450404SSST9450304SSST9600004SS ST9450204SS Standard Models Self-Encrypting Drive ModelsRevision history Contents Interface requirements Defect and error managementInstallation About Fips About self-encrypting drivesPage Savvio 10K.4 SAS Product Manual, Rev. E List of Figures Page Seagate Online Support and Services Seagate Technology support servicesScope Electromagnetic susceptibility Applicable standards and reference documentationStandards Electromagnetic compatibilityKorean KCC Electromagnetic complianceElectromagnetic compliance for the European Union Australian C-TickEuropean Union Restriction of Hazardous Substances RoHS Reference documentsGeneral description Media description Standard featuresProgrammable drive capacity PerformanceReliability Formatted capacitiesFactory-installed options Access time Performance characteristicsInternal drive characteristics Seek performance characteristicsStart/stop time General performance characteristicsCaching write data Prefetch/multi-segmented cache controlCache operation Prefetch operation Unrecoverable Errors Reliability specificationsError rates Recoverable ErrorsPreventive maintenance Reliability and serviceSeek errors Interface errorsReporting control 4 S.M.A.R.TControlling S.M.A.R.T Performance impactThermal monitor Temperature Log Page 0Dh Parameter Code DescriptionPredictive failures Implementation State of the drive prior to testingDrive Self Test DST DST failure definitionLog page entries Short and extended testsShort test Function Code 001b Extended test Function Code 010bProduct repair and return information Product warrantyShipping PowerChoice modes Physical/electrical specificationsPowerChoiceTM power management DC power requirements AC power requirementsPage 450GB standard model DC power requirements 0Gb mode Amps Conducted noise immunity General DC power requirement notesPower sequencing Current profiles for 600GB models Current profilesCurrent profiles for 450GB models GB models in 3Gb operation Power dissipation600GB models in 6Gb operation 450GB models in 3Gb operation 450GB models in 6Gb operation Temperature a. OperatingEnvironmental limits Shock and vibration Relative humidityEffective altitude sea level a. Operating Shock Recommended mounting Corrosive environment Air cleanlinessVibration a. Operating-normal Acoustics Mounting configuration dimensions Mechanical specificationsLevel 2 security About FipsPurpose Data encryption Controlled accessAdmin SP About self-encrypting drivesData bands Default passwordRandom number generator RNG Drive lockingCryptographic erase Authenticated firmware downloadPower requirements Supported commandsDrive error recovery procedures Defect and error managementDrive internal defects/errors SAS system errors Deferred Auto-Reallocation Background Media ScanMedia Pre-Scan Levels of PI Setting and determining the current Type LevelIdle Read After Write Protection Information PIIdentifying a Protection Information drive Drive orientation InstallationAir flow CoolingGrounding Drive mountingInterface requirements SAS featuresDual port support Supported commands Scsi commands supportedSupported commands Supported commands Supported commands Savvio inquiry data Mode Sense dataInquiry data Page Mode Pages Mode Sense data for 600GB drivesMode Sense values for 450GB drives Miscellaneous status Miscellaneous operating features and conditionsMiscellaneous features SAS physical interface Datum B Section C C Section a a Pin descriptions Physical characteristicsConnector requirements Electrical descriptionReady LED Out Signal characteristicsPower SAS transmitters and receiversGeneral interface characteristics SAS-2 Specification complianceLED drive signal Differential signalsNumerics IndexKCC Msid Mtbf See also cooling Page Savvio 10K.4 SAS Product Manual, Rev. E Page Seagate Technology LLC
Related manuals
Manual 82 pages 32.11 Kb
Top Page Image Contents