background image

Seagate BarraCuda Product Manual, Rev. F

  28

 About (SED) Self-Encrypting

 

5.3

Random Number Generator (RNG)

The drive has a 32-byte hardware RNG that it is uses to derive encryption keys or, if requested to do so, to provide random numbers to the host for 
system use, including using these numbers as Authentication Keys (passwords) for the drive's Admin and Locking SPs.

5.4

Drive Locking

In addition to changing the passwords, as described in 

Section 5.2.3, Default password

, the owner should also set the data access controls for the

 

individual bands.

The variable "LockOnReset" should be set to "PowerCycle" to ensure that the data bands will be locked if power is lost. In addition

 

"ReadLockEnabled" and "WriteLockEnabled" must be set to true in the locking table in order for the bands "LockOnReset" setting of "PowerCycle" to

 

actually lock access to the band when a "PowerCycle" event occurs. This scenario occurs if the drive is removed from its cabinet. The drive will not 
honor any data read or write requests until the bands have been unlocked. This prevents the user data from being accessed without the appropriate

 

credentials when the drive has been removed from its cabinet and installed in another system.

5.5

Data Bands

When shipped from the factory, the drive is configured with a single data band called Band 0 (also known as the Global Data Band) which comprises 
LBA 0 through LBA max. The host may allocate additional bands (Band1 to Band15) by specifying a start LBA and an LBA range. The real estate for 
this band is taken from the Global Band.

Data bands cannot overlap but they can be sequential with one band ending at LBA (x) and the next beginning at LBA (x+1).

Each data band has its own drive-generated encryption key. The host may change the Encryption Key (see 

Section 5.6, Cryptographic Erase

) or 

the password when required. The bands should be aligned to 4K LBA boundaries.

5.6

Cryptographic Erase

A significant feature of SEDs is the ability to perform a cryptographic erase. This involves the host telling the drive to change the data encryption key

 

for a particular band. Once changed, the data is no longer recoverable since it was written with one key and will be read using a different key. Since

 

the drive overwrites the old key with the new one, and keeps no history of key changes, the user data can never be recovered. This is tantamount to

 

an instantaneous data erase and is very useful if the drive is to be scrapped or redispositioned.

5.7

Authenticated Firmware Download

In addition to providing a locking mechanism to prevent unwanted firmware download attempts, the drive also only accepts download files which

 

have been cryptographically signed by the appropriate Seagate Design Center.

Three conditions must be met before the drive will allow the download operation:

1. The download must be an SED file. A standard (base) drive (non-SED) file will be rejected.

2. The download file must be signed and authenticated.

3. As with a non-SED drive, the download file must pass the acceptance criteria for the drive. For example it must be applicable to the correct drive

 

model, and have compatible revision and customer status.

5.8

Power Requirements

The standard drive models and the SED drive models have identical hardware, however the security and encryption portion of the drive controller 
ASIC is enabled and functional in the SED models. This represents a small additional drain on the 5V supply of about

30mA and a commensurate increase of about 150mW in power consumption. There is no additional drain on the 12V supply. See the tables in

 

Section 2.7, Power Specifications

 for power requirements on the standard (non-SED) drive models.

5.9

Supported Commands

The SED models support the following two commands in addition to the commands supported by the standard (non-SED) models as listed

 

in 

Table 13

:

• Trusted  Send
• Trusted  Receive

5.10

RevertSP

SED models will support the RevertSP feature which erases all data in all bands on the device and returns the contents of all SPs (Security Providers) 
on the device to their original factory state. In order to execute the RevertSP method the unique PSID (Physical Secure ID) printed on the drive label 
must be provided. PSID is not electronically accessible and can only be manually read from the drive label or scanned in via the 2D barcode.

Summary of Contents for ST1000LM038

Page 1: ...Standard models ST2000LM015 ST1000LM048 ST500LM030 SED FIPS 140 2 models ST2000LM010 ST1000LM038 ST500LM033 Self Encrypting Drive SED models ST500LM032 100807728 Rev F October 2017 SATA Product Manual...

Page 2: ...e Actual data rates may vary depending on operating environment and other factors The export or re export of hardware or software containing encryption may be regulated by the U S Department of Commer...

Page 3: ...16 2 9 Acoustics 16 2 9 1 Test for prominent discrete tones PDTs 16 2 10 Electromagnetic Immunity 17 2 10 1 DC Magnetic Field Immunity 17 2 11 Reliability 18 2 11 1 Data loss under power interruption...

Page 4: ...2 1 Admin SP 27 5 2 2 Locking SP 27 5 2 3 Default password 27 5 2 4 ATA Enhanced Security 27 5 3 Random Number Generator RNG 28 5 4 Drive Locking 28 5 5 Data Bands 28 5 6 Cryptographic Erase 28 5 7 Au...

Page 5: ...ure 2 Typical 2D 5V Startup and Operation Current Profile 13 Figure 3 Attaching SATA Cabling 22 Figure 4 Mounting Dimensions for 1 disk models 23 Figure 5 Mounting Dimensions for 1 disk models alterna...

Page 6: ...r information regarding Warranty Support visit http www seagate com support warranty and replacements For information regarding data recovery services visit http www seagate com services software reco...

Page 7: ...magnetic recording with perpendicular magnetic recording heads media State of the art cache and on the fly error correction algorithms Support for Read Multiple and Write Multiple commands Support fo...

Page 8: ...ing system views the two devices as if they were both masters on two separate ports This essentially means both drives behave as if they are Device 0 master devices The Serial ATA host adapter and dri...

Page 9: ...sical Recording density 2276 Kb in Track density 580 Ktracks in avg Areal density 1320 Gb in2 avg Spindle speed 5400 RPM Maximum sustained data rate OD read 140 MB s Interface SATA 6Gb s ATA data tran...

Page 10: ...www seagate com support warranty and replacements From this page click on the Is my Drive under Warranty link The following are required to be provided the drive serial number model number or part num...

Page 11: ...s Recording method Perpendicular Recording density 2276 Kb in Track density 580 ktracks in avg Areal density 1320 Gb in2 avg Spindle speed 5400 RPM Data transfer rate up to 140 MB s Height mm in 7 0 0...

Page 12: ...Write current is measured with the heads on track based on three 64 sector read or write operations every 100 ms The drive supports three idle modes Performance Idle mode Active Idle mode and Low Pow...

Page 13: ...uct Manual Rev F 12 Drive Specifications 2 7 1 1 Typical current profiles The typical 5V startup and operation current profile is shown in Figure 1 and Figure 2 Figure 1 Typical 1D 5V Startup and Oper...

Page 14: ...Seagate BarraCuda Product Manual Rev F 13 Drive Specifications Figure 2 Typical 2D 5V Startup and Operation Current Profile...

Page 15: ...s are parked and the spindle is at rest The drive accepts all commands and returns to Active mode when disk access is necessary n Sleep mode The drive enters Sleep mode after receiving a Sleep command...

Page 16: ...s 2 8 1 2 Non operating shock The non operating shock level that the drive can experience without incurring physical damage or degradation in performance when subsequently put into operation is 1000 G...

Page 17: ...s for steady state idle and active seeks modes of operation 2 9 1 Test for prominent discrete tones PDTs Seagate follows the ECMA 74 standards for measurement and identification of PDTs An exception t...

Page 18: ...4 5 95 Conducted RF immunity 150 kHz to 80 MHz 3 Vrms 80 AM with 1 kHz sine A EN 61000 4 6 97 Power Frequency H field immunity 1 A m 50Hz 60Hz 3 axes A EN 61000 4 8 97 Voltage dips interrupts 30 Redu...

Page 19: ...oltage Directive LVD 2014 35 EU Seagate drives are tested in representative end user systems Although CE marked Seagate drives comply with all relevant regulatory requirements and standards for the dr...

Page 20: ...on page 21 2 12 8 FCC verification These drives are intended to be contained solely within a personal computer or similar enclosure not attached as an external device As such each drive is considered...

Page 21: ...and materials Our supplier contracts require compliance with our chemical substance restrictions and our suppliers document their compliance with our requirements by providing full disclosure materia...

Page 22: ...sive chemicals as electronic drive component reliability can be affected by the installation environment The silver copper nickel and gold films used in Seagate products are especially sensitive to th...

Page 23: ...TA signal cable can be attached to the drive or host For direct backplane connection the drive connectors are inserted directly into the host receptacle The drive and the host receptacle incorporate f...

Page 24: ...080 in 2 032 mm minimum screw engagement recommended Avoid excessive drive distortion when mounting Refer to the following specifications for stiffness deflection information Figure 4 Mounting Dimensi...

Page 25: ...00 350 0 200 0 250 69 850 0 250 2 499 1 270 7 949 1 270 16 520 22 450 90 600 14 000 2X 3 000 7 000 0 200 2X M3 X 0 5 6H MOUNTING HOLES BOTH SIDES 4MM MIN SCREW DEPTH FROM M3 PADS NO THRU 3 5 075 3X90...

Page 26: ...20 0 25 69 850 0 250 22 450 16 520 7 949 1 270 2 499 1 270 90 600 14 000 2X 3 000 BOTH SIDES 7 000 0 200 BASE 13 430 3 500 2X M3 X 0 5 6H MOUNTING HOLES BOTH SIDES 4MM MIN SCREW DEPTH FROM M3 PADS NO...

Page 27: ...Policy document uploaded on the NIST website To reference the product certification visit http csrc nist gov groups STM cmvp documents 140 1 1401vend htm and search for Seagate Security Level 2 Securi...

Page 28: ...the drive s possible16 data bands see Section 5 5 Data Bands 5 2 Controlled Access The drive has two security providers SPs called the Admin SP and the Locking SP These act as gatekeepers to the drive...

Page 29: ...n key for a particular band Once changed the data is no longer recoverable since it was written with one key and will be read using a different key Since the drive overwrites the old key with the new...

Page 30: ...Notes below Notes 1 All pins are in a single row with a 1 27 mm 0 050 in pitch 2 The comments on the mating sequence apply to the case of backplane blindmate connector only In this case the mating seq...

Page 31: ...Cache E7h Flush Cache Extended EAh Identify Device ECh Initialize Device Parameters 91h Read Buffer E4h Read DMA C8h Read DMA Extended 25h Read DMA without Retries C9h Read Long with Retries 22h Read...

Page 32: ...rusted Receive 5Ch SED only Trusted Receive DMA 5Dh SED only Trusted Send 5Eh SED only Trusted Send DMA 5Fh SED only Write Buffer E8h Write DMA CAh Write DMA Extended 35h Write DMA without Retries CBh...

Page 33: ...l heads 16 4 Retired 0000H 5 Retired 0000H 6 Number of logical sectors per logical track 63 003FH 7 9 Retired 0000H 10 19 Serial number 20 ASCII characters 0000H none ASCII 20 Retired 0000H 21 Retired...

Page 34: ...IO cycle time with IORDY flow control 120 ns 0078H 69 Additional Supported bits Bit 4 means Device Encrypts All User Data on the device Bit 7 means IEEE1667 protocol is supported xx1xH or xx9xH 70 74...

Page 35: ...eagate reserved 0000H 108 111 The mandatory value of the world wide name WWN for the drive NOTE This field is valid if word 84 bit 8 is set to 1 indicating 64 bit WWN support Each drive will have a un...

Page 36: ...mode 0 is supported 1 Ultra DMA mode 1 is supported 2 Ultra DMA mode 2 is supported 3 Ultra DMA mode 3 is supported 4 Ultra DMA mode 4 is supported 5 Ultra DMA mode 5 is supported 6 Ultra DMA mode 6...

Page 37: ...er mode based on value in Sector Count register Sector Count register values 00H Set PIO mode to default PIO mode 2 01H Set PIO mode to default and disable IORDY PIO mode 2 08H PIO mode 0 09H PIO mode...

Page 38: ...es unnecessary drive returns The diagnostic software ships with all new drives and is also available at http www seagate com support downloads seatools This drive is shipped with S M A R T features di...

Page 39: ...ited States 408 658 1000 ASIA PACIFIC Seagate Singapore International Headquarters Pte Ltd 7000 Ang Mo Kio Avenue 5 Singapore 569877 65 6485 3888 EUROPE MIDDLE EAST AND AFRICA Seagate Technology SAS 1...

Reviews:

Related manuals for ST1000LM038