Seagate SED FIPS 140-2 MODEL About self-encrypting drives, Data encryption, Controlled access

Page 32

6.0About self-encrypting drives

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, com- monly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 3.17.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the com- puter, storage and digital communications industry. Seagate’s SED models comply with the standards pub- lished by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two commands:

•Security Protocol Out

•Security Protocol In

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

6.1Data encryption

Encrypting drives use one inline encryption engine for each port, employing AES-128 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation, cannot be disabled, and do not detract in any way from the performance of the drive.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 6.5).

6.2Controlled access

The drive has two security partitions (SPs) called the "Admin SP" and the "Locking SP." These act as gate- keepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

6.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 6.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Makers Secure ID) password.

26

Constellation ES.2 Serial ATA Product Manual, Rev. D

Page 31 Page 33
Image 32
Page 31 Page 33
Contents SED Fips 140-2 Model Review Pending ST33000652NS ST33000650NSST33000651NSStandard Model Self-Encrypting Drive Model Revision history Revision Date Sheets affected or commentsContents Serial ATA Sata interface List of Figures Page Seagate Technology support services Seagate Online Support and ServicesIntroduction About the Serial ATA interface Drive specifications summary Drive specificationsSpecification summary tables Information for your drive Default logical geometry LBA modeFormatted capacity Recording and interface technologyPhysical characteristics Seek timeStart/stop times Typical seek times ms Read WritePower specifications 3000GB Drive DC power requirements Typical current profiles Typical 5V startup and operation current profileConducted noise Voltage tolerancePower-management modes Active modeIdle mode Sleep modePower Condition Name Power Condition ID Description Extended Power Conditions PowerChoiceTMPowerChoice is invoked using one of two methods PowerChoice Supported Extended Power Condition Indentifiers Power Condition Name Manufacturer Default Timer ValuesEPC Subcommand Description Power Condition Identifiers Power Condition NameTemperature a. Operating Environmental limitsHumidity Relative humidity AltitudeShock Operating shockAcoustics Test for Prominent Discrete Tones PDTsElectromagnetic immunity Fluid Dynamic Bearing FDB motor acousticsSafety certification ReliabilityAgency certification Electromagnetic compatibilityFCC verification Korean RRLAustralian C-Tick N176 Environmental protection Corrosive environmentProduct warranty Reference documentsShipping StorageConfiguring and mounting the drive Handling and static-discharge precautionsConfiguring the drive Serial ATA cables and connectorsDrive mounting Breather hole location top coverMechanical specifications Mounting dimensions-top, side and end viewLevel 2 security About FipsPurpose Controlled access Admin SPAbout self-encrypting drives Data encryptionRandom number generator RNG Drive lockingData bands Cryptographic eraseAuthenticated firmware download Power requirementsSupported commands ATA Security Erase Unit Command on SED Sata drivesSerial ATA Sata interface Hot-Plug compatibilitySerial ATA device plug connector pin definitions Serial ATA connector pin definitionsSignal Pin Function DefinitionCommand name Command code in hex Supported ATA commandsSupported ATA commands F3H Identify Device command Word Description ValueXx07H Description if bit is set to Bit Word Bit WordWord Set Features command Set Features command valuesCode in features register A.R.T. command 3 S.M.A.R.T. commandsA.R.T. commands Index ITE RNG Page Page Disc Drive, Scotts Valley, California 95066-4544, USA

ST33000650NS, SED FIPS 140-2 MODEL, ST33000651NS, ST33000652NS specifications

Seagate has long been a leader in data storage solutions, and their range of hard drives, specifically the ST33000652NS, ST33000651NS, SED FIPS 140-2 model, and ST33000650NS, showcases the company’s commitment to performance, security, and reliability. These models are ideal for enterprise applications requiring robust data protection and efficient storage capabilities.

The Seagate ST33000652NS is designed for high-capacity storage, offering 3 TB of space. It utilizes a SATA 6Gb/s interface which ensures rapid data transfer rates, making it suitable for environments that demand quick access to large datasets. Its 7200 RPM spindle speed enhances performance, ensuring that read and write operations are executed swiftly.

Similarly, the ST33000651NS also provides 3 TB of storage but is slightly optimized for different workloads. Both models feature Seagate’s advanced caching technology, which enhances performance by efficiently managing data flow to and from the drive. This is crucial for applications requiring high-throughput operations, such as video streaming and database management.

Transitioning to the Seagate SED FIPS 140-2 model, this drive is particularly focused on data security. The FIPS 140-2 certification indicates that it adheres to stringent federal standards for cryptographic modules, ensuring that sensitive information remains protected. This model caters to government and enterprise clients concerned about the integrity and confidentiality of their data.

On the other hand, the ST33000650NS also features a similar capacity but is geared towards reliability and endurance. It is engineered to endure the challenges of continuous operation, accommodating enterprise environments that require 24/7 accessibility without compromising performance.

All these models come with integrated power management features that enhance energy efficiency, reducing operational costs while minimizing environmental impact. They also utilize Seagate’s innovative technologies for error recovery and data integrity, ensuring users can rely on their performance under demanding circumstances.

In summary, the Seagate ST33000652NS, ST33000651NS, SED FIPS 140-2, and ST33000650NS collectively offer a diverse range of features catered for various enterprise needs. With a strong emphasis on storage capacity, data security, and performance reliability, these drives are well-equipped to handle the intensive demands of modern digital landscapes. Whether looking for high-speed access or enhanced security features, Seagate continues to deliver trustworthy solutions for today’s data-driven world.
Top Page Image Contents