Sanitizing disks using Storage Encryption before return to vendor

If you want to return a disk to a vendor but do not want anyone to access sensitive data on the disk, you can sanitize it first by using the disk encrypt sanitize command. This renders the data on the disk inaccessible, but the disk can be reused. This command only works on spare disks.

Steps

Migrate any data that needs to be preserved to a different aggregate.
Destroy the aggregate.
Identify the disk ID for the disk to be sanitized by entering the following command: disk encrypt show
Enter the following command: disk encrypt sanitize disk_ID

Example

The following command sanitizes a self-encrypting disk with the disk ID 0c.00.3. You can run the sysconfig -r command before and after the operation to verify the results.

storage-system> sysconfig -r
Aggregate aggr0 (online, raid_dp) (block checksums)
  Plex /aggr0/plex0 (online, normal, active)
    RAID group /aggr0/plex0/rg0 (normal)

      RAID Disk	Device 	HA  SHELF BAY CHAN Pool Type  RPM  Used (MB/blks)    Phys (MB/blks)
      ---------	------ 	------------- ---- ---- ---- ----- --------------    --------------
      dparity 	0c.00.0	0c    0   0   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
      parity  	0c.00.1	0c    0   1   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
      data    	0c.00.2	0c    0   2   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 


Spare disks

RAID Disk	Device 	HA  SHELF BAY CHAN Pool Type  RPM  Used (MB/blks)    Phys (MB/blks)
---------	------ 	------------- ---- ---- ---- ----- --------------    --------------
Spare disks for block or zoned checksum traditional volumes or aggregates
spare   	0c.00.3	0c    0   3   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
spare   	0c.00.4	0c    0   4   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
spare   	0c.00.5	0c    0   5   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 

storage-system> disk encrypt sanitize 0c.00.3
storage-system> Wed Jun 30 17:49:16 PDT [disk.failmsg:error]: Disk 0c.00.3 (3SL04F3V00009015WTHU): message received.
Wed Jun 30 17:49:16 PDT [raid.disk.unload.done:info]: Unload of Disk 0c.00.3 Shelf 0 Bay 3 [SYSTEM   X415_S15K7560A15 NQS3] S/N [3SL04F3V00009015WTHU] has completed successfully

storage-system> Wed Jun 30 17:49:25 PDT [disk.sanit.complete:info]: Disk 0c.00.3 [S/N 3SL04F3V00009015WTHU] has completed sanitization.

storage-system> sysconfig -r                                                                               
Aggregate aggr0 (online, raid_dp) (block checksums)
  Plex /aggr0/plex0 (online, normal, active)
    RAID group /aggr0/plex0/rg0 (normal)

      RAID Disk	Device 	HA  SHELF BAY CHAN Pool Type  RPM  Used (MB/blks)    Phys (MB/blks)
      ---------	------ 	------------- ---- ---- ---- ----- --------------    --------------
      dparity 	0c.00.0	0c    0   0   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
      parity  	0c.00.1	0c    0   1   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
      data    	0c.00.2	0c    0   2   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 


Spare disks

RAID Disk	Device 	HA  SHELF BAY CHAN Pool Type  RPM  Used (MB/blks)    Phys (MB/blks)
---------	------ 	------------- ---- ---- ---- ----- --------------    --------------
Spare disks for block or zoned checksum traditional volumes or aggregates
spare   	0c.00.4	0c    0   4   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
spare   	0c.00.5	0c    0   5   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 

Maintenance disks

RAID Disk	Device 	HA  SHELF BAY CHAN Pool Type  RPM  Used (MB/blks)    Phys (MB/blks)
---------	------ 	------------- ---- ---- ---- ----- --------------    --------------
sanitized	0c.00.3	0c    0   3   SA:B   -  SAS  15000 560000/1146880000 560208/1147307688 
storage-system>