Platform and Infrastructure
-
NIST purge method for media sanitization (QFX5240-64OD and QFX5240-64QD)—We've extended support for NIST media sanitization for Non-Volatile Memory Express (NVMe) solid-state drives to include:
-
Cryptographic scramble and block erase priorities for the purge method
-
NVMe format with user data erase for the purge method if the previous step fails
-
NVMe format for the clear method
For example, you can use this high level of data destruction when you pull a device from production. To maintain data security, sanitize any disk drives in the device before they leave your premises. The NIST Special Publication 800-88 specifies the priority levels for sanitizing disk drives. In Junos OS Evolved, sanitize a disk drive using the
request system zeroize (disk1 | disk2)command. The sanitization process starts at the highest NIST sanitization priority that the NVMe drive supports. If the attempt fails, the process uses the method associated with the next lowest NIST priority level, and so on, until the disk is sanitized either using one of the NIST methods or using the Linux dd command.[See NIST Special Publication 800-88, Guidelines for Media Sanitization and request system zeroize.]
-