Seagate ST3500414SS About self-encrypting drives, Data encryption, Controlled access, Admin SP

Page 51

9.0About self-encrypting drives

Self-encrypting drives (SEDs) offer encryption and security services for the protection of stored data, com- monly known as “protection of data at rest.” These drives are compliant with the Trusted Computing Group (TCG) Enterprise Storage Specifications as detailed in Section 3.2.

The Trusted Computing Group (TCG) is an organization sponsored and operated by companies in the com- puter, storage and digital communications industry. Seagate’s SED models comply with the standards pub- lished by the TCG.

To use the security features in the drive, the host must be capable of constructing and issuing the following two SCSI commands:

•Security Protocol Out

•Security Protocol In

These commands are used to convey the TCG protocol to and from the drive in their command payloads.

9.1Data encryption

Encrypting drives use one inline encryption engine for each port, employing AES-128 data encryption in Cipher Block Chaining (CBC) mode to encrypt all data prior to being written on the media and to decrypt all data as it is read from the media. The encryption engines are always in operation, cannot be disabled, and do not detract in any way from the performance of the drive.

The 32-byte Data Encryption Key (DEK) is a random number which is generated by the drive, never leaves the drive, and is inaccessible to the host system. The DEK is itself encrypted when it is stored on the media and when it is in volatile temporary storage (DRAM) external to the encryption engine. A unique data encryption key is used for each of the drive's possible16 data bands (see Section 9.5).

9.2Controlled access

The drive has two security partitions (SPs) called the "Admin SP" and the "Locking SP." These act as gate- keepers to the drive security services. Security-related commands will not be accepted unless they also supply the correct credentials to prove the requester is authorized to perform the command.

9.2.1Admin SP

The Admin SP allows the drive's owner to enable or disable firmware download operations (see Section 9.4). Access to the Admin SP is available using the SID (Secure ID) password or the MSID (Makers Secure ID) password.

Constellation ES Series SAS Product Manual, Rev. E

43

Page 50 Page 52
Image 51
Page 50 Page 52
Contents ST32000446SS ST31000426SS ST3500416SS Standard Models Self-Encrypting Drive ModelsSED Fips 140-2 Models Revision history Contents Interface requirements Defect and error managementInstallation About Fips About self-encrypting drivesPower Constellation ES Series SAS Product Manual, Rev. E List of Figures Constellation ES Series SAS Product Manual, Rev. E Seagate Online Support and Services Seagate Technology support servicesScope Electromagnetic susceptibility Applicable standards and reference documentationStandards Electromagnetic compatibilityKorean KCC Electromagnetic complianceElectromagnetic compliance for the European Union Australian C-TickEuropean Union Restriction of Hazardous Substances RoHS Reference documentsGeneral description Media description Standard featuresProgrammable drive capacity PerformanceReliability Formatted capacitiesFactory-installed options Access time Performance characteristicsInternal drive characteristics Seek performance characteristicsStart/stop time General performance characteristicsCache operation Prefetch/multi-segmented cache controlPrefetch operation Caching write dataUnrecoverable Errors Reliability specificationsError rates Recoverable ErrorsPreventive maintenance Reliability and serviceSeek errors Interface errorsReporting control 4 S.M.A.R.TControlling S.M.A.R.T Performance impactTemperature Log Page 0Dh Parameter Code Description Predictive failuresThermal monitor Implementation State of the drive prior to testingDrive Self Test DST DST failure definitionLog page entries Short and extended testsShort test Function Code 001b Extended test Function Code 010bProduct warranty ShippingProduct repair and return information Physical/electrical specifications PowerChoiceTM power managementPowerChoice modes DC power requirements AC power requirementsConstellation ES Series SAS Product Manual, Rev. E Constellation ES Series SAS Product Manual, Rev. E Page General DC power requirement notes Power sequencingConducted noise immunity TB model current profiles Current profilesConstellation ES Series SAS Product Manual, Rev. E GB model current profiles 2TB models in 3Gb operation Power dissipation2TB models in 6Gb operation 1TB models in 3Gb operation 1TB models in 6Gb operation ST3500414SS CURRENT/POWER vs Throughput SAS 3.0GB 500GB models in 3Gb operationOs per Second 500GB models in 6Gb operation Temperature a. Operating Environmental limitsRelative humidity Effective altitude sea level a. Operating Shock and vibrationShock Recommended mounting Corrosive environment Air cleanlinessVibration a. Operating-normal AcousticsElectromagnetic susceptibility Mounting configuration dimensions Mechanical specificationsAbout Fips PurposeLevel 2 security Data encryption Controlled accessAdmin SP About self-encrypting drivesData bands Default passwordRandom number generator RNG Drive lockingCryptographic erase Authenticated firmware downloadPower requirements Supported commandsDefect and error management Drive internal defects/errorsDrive error recovery procedures SAS system errors Background Media Scan Media Pre-ScanDeferred Auto-Reallocation Idle Read After Write Drive orientation InstallationAir flow CoolingGrounding Drive mountingInterface requirements SAS featuresDual port support Supported commands Scsi commands supportedSupported commands Supported commands Supported commands Mode Sense data Inquiry dataConstellation ES inquiry data Page Mode Sense data changeable and default values for 2TB drives Mode Sense data changeable and default values for 1TB drives 3a 38 60 30 00 00 02 Miscellaneous operating features and conditions Miscellaneous featuresMiscellaneous status SAS physical interface Datum B Section C C Section a a Pin descriptions Physical characteristicsConnector requirements Electrical descriptionReady LED Out Signal characteristicsPower SAS transmitters and receiversGeneral interface characteristics SAS-2 Specification ComplianceLED drive signal Differential signalsNumerics IndexKCC Msid Mtbf See also cooling Page Constellation ES Series SAS Product Manual, Rev. E Page Seagate Technology LLC

ST3500414SS, ST3500415SS, ST32000445SS, ST31000425SS, ST32000446SS specifications

Seagate, a leader in data storage solutions, has introduced a range of high-capacity and reliable hard drives designed for enterprise environments, including the Seagate ST31000424SS, ST3500416SS, ST31000426SS, ST32000444SS, and ST32000446SS. Each of these models is built with an emphasis on performance, endurance, and advanced data protection technologies, catering to mission-critical applications and data-intensive workloads.

The ST31000424SS is a 1TB drive designed for servers and data centers. It offers a 7,200 RPM spindle speed and a 6 Gb/s SATA interface, ensuring quick data access and transfer rates. With a 64MB cache buffer, the ST31000424SS provides enhanced read/write performance, making it suitable for applications that demand quick responses from the storage subsystem.

Similarly, the ST3500416SS is a high-capacity 500GB model, also spinning at 7,200 RPM with a 6 Gb/s SATA interface. This drive is ideal for mid-range servers and enterprise storage, providing an excellent balance of performance and capacity for users looking to optimize their storage efficiency while maintaining lower power consumption.

The ST31000426SS expands the capacity to 1TB while retaining the same reliability and performance characteristics as its counterparts. Its robust design ensures reliability in multi-drive environments, making it an appealing choice for virtualization and database applications, where performance is critical.

The ST32000444SS and ST32000446SS represent Seagate's commitment to higher capacities, with both offering 2TB of storage. They both feature 7,200 RPM speeds, 6 Gb/s SATA interfaces, and 64MB cache buffers, catering to high-demand environments such as cloud storage and data analytics. The drives also integrate advanced error recovery and data integrity features, ensuring the protection of sensitive data, which is vital for enterprise users.

Each model supports Seagate's PowerChoice technology, which optimizes power consumption without sacrificing performance, enhancing energy efficiency in modern data centers. With a broad range of capacities and performance levels, these Seagate drives provide scalable solutions tailored to meet the robust demands of today’s enterprise applications, ensuring reliability and performance for critical data operations.
Top Page Image Contents