Smartfailed drive ERASE state

At the end of a smartfail process, OneFS attempts to delete the authentication key on a drive if it is unable to reset the key.

Note Image

  • To securely delete the authentication key on a single drive, smartfail the individual drive.
  • To securely delete the authentication key on a single node, smartfail the node.
  • To securely delete the authentication keys on an entire cluster, smartfail each node and run the isi_reformat_node command on the last node.

Upon running the isi dev command, the system displays output similar to the following example, showing the drive state as ERASE:
Node 1, [ATTN]
  Bay 1        Lnum 11      [REPLACE]      SN:Z296M8HK    000093172YE04  /dev/da1   
  Bay 2        Lnum 10      [HEALTHY]      SN:Z296M8N5    00009330EYE03  /dev/da2   
  Bay 3        Lnum 9       [ERASE]        SN:Z296LBP4    00009330EYE03  /dev/da3 
  

Drives showing the ERASE state can be safely retired, reused, or returned.

Any further access to a drive showing the ERASE state requires the authentication key of the drive to be set to its default manufactured security ID (MSID). This action erases the data encryption key (DEK) on the drive and renders any existing data on the drive permanently unreadable.