HP LaserJet, OfficeJet, PageWide, ScanJet - HP FutureSmart Firmware Device Hard Disk, SSD, and eMMC Security (white paper)

PUBLIC 4
2 Erase / Unlock
1 Secure Erase
Figure 4: Erase Customer Data settings in Web Jetadmin
NOTE: This setting corresponds to Erase Job Data setting in EWS
3. Secure Disk Erase
This feature securely erases all data on the hard disk, including disk sectors spared and relocated sectors.
This erase operation, also known as ATA Erase, is executed directly by the hard disk controller.
Secure Disk Erase meets the “Purge” erase standard defined in NIST Special Publication 800-88, Guidelines
for Media Sanitation. (See the Government Erase Specifications.)
This erase mode is only accessible from the pre - boot menus for the main system disk. It is available for
accessory disks in EWS and Web Jetadmin. If the erased disk contained the system firmware, performing
an Erase/Unlock will render the device inoperable, and a new firmware image must be installed to the disk
before the device can be used again.
Figure 5: Secure Disk Erase in device Pre - boot Menu
4. Erase / Unlock Encrypted Disk
The HP High Performance Secure Hard Disk supports a special erase referred to as a “Crypto Erase”.
Selecting the Erase/Unlock option for one of these disks forces its encryption keys to be destroyed and
new keys generated. This instantly renders all the encrypted data on the disk unreadable. There is no
method to recover the encryption keys and no method to recover the encrypted data once the keys have
been changed.
This erase mode is only accessible from the pre - boot menus for the main system disk. It is available for
accessory disks in EWS and Web Jetadmin. If the erased disk contained the system firmware, performing
an Erase/Unlock will render the device inoperable, and a new firmware image must be installed to the disk
before the device can be used again.
Figure 6: Erase / Unlock in device Pre - boot Menu
1 Secure Erase
2 Erase / Unlock
3 Get Status
1 Secure Erase
2 Erase / Unlock
3 Get Statuses