Selling MBP SSD – how to erase securely?

Discussion in 'MacBook Pro' started by billpaxton, Jun 26, 2012.

  1. billpaxton macrumors member

    billpaxton

    Joined:
    Feb 12, 2008
    #1
    Hi guys, before you flame me and say you can't secure erase i completely understand the reasons and why you can't. All im trying to do is have peace of mind my data can't be recovered by the buyer. i have a 17" 2011 MBP with 128GB SSD, and im shipping it out tomorrow. just wanted to know the peoples opinions of their ways they erased their SSD's.

    my current way is to re-install 2x

    cheers
    Bill
     
  2. MH01 macrumors G4

    MH01

    Joined:
    Feb 11, 2008
  3. Dangerous Theory macrumors 68000

    Joined:
    Jul 28, 2011
    Location:
    UK
    #3
    Doesn't the disk utility allow you to perform a 7-pass erase? If not just look for some software that does. Then again that requires another drive with lion on to be running off.
     
  4. Librarian580 macrumors newbie

    Joined:
    Jun 16, 2012
    #4
    Wouldn't a 1-Pass work just fine for an SSD, since they operate differently than HD's?

    I'd imagine a 7-Pass could potentially wear-down the life by quite a bit, but I could be wrong.
     
  5. iamthedudeman macrumors 65816

    Joined:
    Jul 7, 2007
    #5
    First, it's not good for the drive, and second, it wouldn't work properly anyway. Not good for the drive because it writes to the drive too many times. Wouldn't work properly because just like OSX cannot control where it writes to on the drive. The SSD's controller is responsible for that, and due to wear leveling algorithms, wouldn't get you the intended results. With an Apple SSD, all you need is to perform a "erase." Third party SSD drive you would have to perform a "secure erase."

    http://www.ocztechnologyforum.com/f...-SSDs-A-Look-Inside&highlight=nand+transistor

    NAND flash memory uses floating gate MOSFET transistors. Their default state is when the charge is over the 50%. If the flow through the gate is above the 50% threshold, it has a value of 1. When the charge passing through drops below the 50% threshold, the value changes to 0.

    0's are data, 1's is erase....the fundamental laws of MLC NAND dictate this. You only write the 0's when you write data to NAND.

    So in an erased state the NAND has to report a 1.

    This is how it is done on a disk drive or 'HD'.

    https://docs.google.com/viewer?url=http://cmrr.ucsd.edu/people/Hughes/DataSanitizationTutorial.pdf


    Most modern SSDs have built-in commands that instruct on-board firmware to run a standard sanitization protocol on the drive to remove all data. Since the manufacturer has "full knowledge" of the drive's design, these techniques are reliable, fast and effective, and take all of two minutes.

    ATA Secure Erase is part of the ATA ANSI specification and when implemented correctly, wipes the entire contents of a drive at the hardware level instead of through software tools. Software tools over-write data on hard drives and SSDs, often through multiple passes; the problem with SSDs is that such software over-writing tools cannot access all the storage areas on an SSD, leaving behind blocks of data in the service regions of the drive (examples: Bad Blocks, Wear-Leveling Blocks, etc.)

    When an ATA Secure Erase (SE) command is issued against a SSD’s built-in controller that properly supports it, the SSD controller resets all its storage cells as empty (releasing stored electrons) - thus restoring the SSD to factory default settings and write performance. When properly implemented, SE will process all storage regions including the protected service regions of the media.

    Secure Erase is recognized by the U.S. National Institute for Standards and Technology (NIST), as an effective and secure way to meet legal data sanitization requirements against attacks up to laboratory level.

    On OSX there is not way to secure erase at a software level a SSD drive. But I was explained by Apple Business that Apple's firmware on the drive has 'hardware level ' encryption on the drive itself. When you initiate a 'erase' function it activates the firmware to first encrypt and then secure erase the drive.

    Secure Erase issues Apple's SSD controller firmware's pre-programed ATA Securiy Erase Unit command. It applies a voltage spike at a specific voltage to all of the NAND simultaneously flushing the stored electrons from the flash memory cells, thus cleaning the NAND. Thus, when the Secure Erase command is ran and the voltage to all the NAND is over 50%, all the NAND is set to an erased to a unrecoverable state. speeds are reset to default, and it is in ready to be written to state.

    There isn't a 'secure erase' function on a Apple OEM SSD. It is activated via firmware when it receives a 'erase' function. If you have a 3rd party SSD, M4, Samsung 830, you will have to hook it up to windows if you want to ensure to secure erase that SSD. I don't think OSX will activate a 'firmware secure erase' or 'hardware' erase as OSX doesn't have to 'language' to activate that function on 3rd party SSD drives if it exists on those drives in the first place. I don't know about that but I am sure most do. Which one's do or do not I am not sure.



    This reason and Trim support are the main reasons I stick with a Apple OEM SSD drive, slower or not. In everyday use you cannot tell the difference between the drive I am using( Apple SSD Toshiba HG3 GBSJ model) and a 6G drive in every day use.

    I run my business and this function is a must for me.

    This sofwware "PMagic' does the same thing as Apple's SSD's firmware on Windows.

    http://howto.cnet.com/8301-11310_39-20115106-285/how-to-securely-erase-an-ssd-drive/
     
  6. billpaxton thread starter macrumors member

    billpaxton

    Joined:
    Feb 12, 2008
    #6
    all the security options in Recovery for Lion are greyed out, i can't even do an erase free space!

    i just did a standard erase through recovery, lets hope that works.
     
  7. likegadgets macrumors 6502

    Joined:
    Jul 22, 2008
    Location:
    US
    #7
    Would any of the DOS Boot options work on a MAC to erase the drive such as Secure Erase (HDDErase.exe)?
     
  8. billpaxton thread starter macrumors member

    billpaxton

    Joined:
    Feb 12, 2008
    #8
    great info thanks for the heads up. i have the same drive as you i think (2011 MBP) and trim was enabled yes so hopefully it did its job as intended.

    FYI i actually watched that Vimeo clip. Hilarity.
    thanks again guys.
     
  9. yeah macrumors 6502a

    yeah

    Joined:
    Jul 12, 2011
    #9
    Disk utility doesn't allow any secure erase on an SSD.
     
  10. fdw777 macrumors newbie

    Joined:
    Mar 7, 2012
    #10
    Secure Erase is quite possible from DU

    Don't know what all the hip is about.

    Disk Utility allows Secure Erase......I've done on 3 Crucial SSD's, 2-M4's and 1- M550.
    The key is the SSD drive can NOT be the boot drive (must be removed from the computer). If you take out the SSD and put it into a external case and connect it to another Mac secure erase is available.

    Like I said I've done it no issues what so ever. Actually improved life and health indicators via Drive DX
     
  11. lordboogie macrumors member

    Joined:
    Oct 15, 2012
    #11
    Download PartedMagic ISO image, and create a live USB with partedmagic. Boot up using that USB, and you can ATA Secure Erase your SSD like so.

    You could also do it with an Ubuntu live usb, but you'd have to enter the hdparm commands manually using terminal.
     
  12. Cassady macrumors 6502a

    Cassady

    Joined:
    Jul 7, 2012
    Location:
    Sqornshellous
    #12
    About to do the same. Have the Crucial M500. Checked out their website - also mentioned it cannot be an OS drive, so will have it running externally.

    They suggest simply running Disk utility, and deleting the partition on drive? Does that make sense?
     

Share This Page