如何使用安全清除，它是否在安装CD上？

Question

如何使用安全清除，它是否在安装CD上？

5

据说有一种内置的硬盘魔法叫做“安全擦除”，比起“dd if=/dev/zero…”要快得多，而且更安全。

我对速度的提升最感兴奋。

Parted Magic似乎有一个图形界面可以实现这个功能：http://www.ocztechnologyforum.com/forum/showthread.php?81321-Secure-Erase-With-bootable-CD-USB-Linux..-Point-and-Click-Method 在Ubuntu上有类似的东西吗？更好的是，是否有办法像使用smartctl那样“手动”发出这个命令？

- Mikey

虽然这是一个很棒的功能，大多数现代硬盘都支持，但并不是所有平台都支持。有时候是控制器（或逻辑寻址）的问题，对于某些平台，BIOS不支持（或阻止）'SecureErase'命令（以防止恶意使用）。请参考：http://cmrr.ucsd.edu/people/Hughes/HDDEraseReadMe.txt - david6

使用它的另一个好处是告诉现代固态硬盘的固件，当前存在于磁盘上的数据不再需要。这可以提高性能。 - Marius Gedminas

@LiveWireBT 用户没有提到他/她使用的是固态硬盘。 - Richard

@Richard 他/她问的是如何运行ATA安全擦除，解决方案也是一样的。在SSD和HDD上执行ATA安全擦除的区别可能只是完成过程所需的时间不同。 - LiveWireBT

1个回答

- Sergey · Accepted Answer

安全擦除是ATA标准的一部分，由标准版的hdparm程序支持：

  ATA Security Feature Set

   These switches are DANGEROUS to experiment with, and might not work with some kernels.  USE AT YOUR OWN RISK.

   --security-help
          Display terse usage info for all of the --security-* options.

   --security-freeze
          Freeze the drive´s security settings.  The drive does not accept any security commands until  next  power-on  reset.
          Use this function in combination with --security-unlock to protect drive from any attempt to set a new password. Can
          be used standalone, too.  No other options are permitted on the command line with this one.

   --security-unlock PWD
          Unlock the drive, using password PWD.  Password is given as an ASCII string and is padded  with  NULs  to  reach  32
          bytes.   The  applicable  drive password is selected with the --user-master switch (default is "user" password).  No
          other options are permitted on the command line with this one.

   --security-set-pass PWD
          Lock the drive, using password PWD (Set Password) (DANGEROUS).  Password is given as an ASCII string and  is  padded
          with NULs to reach 32 bytes.  Use the special password NULL to set an empty password.  The applicable drive password
          is selected with the --user-master switch (default is "user" password) and the applicable  security  mode  with  the
          --security-mode switch.  No other options are permitted on the command line with this one.

   --security-disable PWD
          Disable drive locking, using password PWD.  Password is given as an ASCII string and is padded with NULs to reach 32
          bytes.  The applicable drive password is selected with the --user-master switch (default is  "user"  password).   No
          other options are permitted on the command line with this one.

   --security-erase PWD
          Erase  (locked) drive, using password PWD (DANGEROUS).  Password is given as an ASCII string and is padded with NULs
          to reach 32 bytes.  Use the special password NULL to represent an empty password.  The applicable drive password  is
          selected  with the --user-master switch (default is "user" password).  No other options are permitted on the command
          line with this one.

   --security-erase-enhanced PWD
          Enhanced erase (locked) drive, using password PWD (DANGEROUS).  Password is given as an ASCII string and  is  padded
          with  NULs  to  reach 32 bytes.  The applicable drive password is selected with the --user-master switch (default is
          "user" password).  No other options are permitted on the command line with this one.

   --user-master USER
          Specifies which password (user/master) to select.  Defaults to user  password.   Only  useful  in  combination  with
          --security-unlock, --security-set-pass, --security-disable, --security-erase or --security-erase-enhanced.
                  u       user password
                  m       master password

   --security-mode MODE
          Specifies which security mode (high/maximum) to set.  Defaults to high.  Only useful in combination with --security-
          set-pass.
                  h       high security
                  m       maximum security

          THIS FEATURE IS EXPERIMENTAL AND NOT WELL TESTED. USE AT YOUR OWN RISK.

由于明显的原因，我没有测试过这些选项，你需要自己看看它们是否有效 :)