Remove Data from Nonvolatile Memory

Prev Next

Soft Removal of User Data from Nonvolatile Memory

Removes files and installs factory default configuration on flash disk.

Restore Factory Default Configuration

  1. Shutdown Nodegrid device and power off.

  2. To remove the device from the network, disconnect Ethernet cables.

  3. Disconnect any USB storage device and USB network device connected to Nodegrid device.

  4. To access Nodegrid unit, use one of these options:

    • Connect a terminal/workstation to the Nodegrid console port (RJ-45 console adapter) and a straight-through network cable.

    • Connect a HDMI monitor (HDMI port) and USB keyboard (USB port).

  5. Power on the device.

  6. On the following menu, select Nodegrid Manager - Rescue Mode.

     ****************************************************************************
     *Nodegrid Manager <version>                                                *
     *Nodegrid Manager <version> - Factory Default Settings                     *
     *Nodegrid Manager <version> - Rescue Mode       <--                        *
     *Nodegrid Manager <version> - Network boot                                 *
     *Nodegrid Manager <version> (verbose)                                      *
     *                                                                          *
     *                                                                          *
     *                                                                          *
     *                                                                          *
     *                                                                          *
     ****************************************************************************
    ` Use the * and * keys to select which entry is highlighted.
      Press enter to boot the selected OS, `e' to edit the commands
      before booting or `c' for a command-line.`
    
  7. At the prompt ("bash-4.3#"), run this command (erases all files and loads factory configuration):

    apply_settings --factory-and-cleanlogs -f -h
    
  8. Wait for this message:

    Text

    Apply factory settings completed.  INIT: 
    Switching [ ... ] reboot: System halted
    
  9. Power off the unit.

Hard Removal - Secure Erase

This completely erases the flash disk. This procedure destroys ALL data on flash disk and render it unrecoverable even by data recovery services. After that, the Nodegrid software must be reinstalled via network.

Fully Erase Nonvolatile Memory

  1. Shutdown Nodegrid device and power off.

  2. To remove the device from the network, disconnect Ethernet cables.

  3. Disconnect any USB storage device and USB network device connected to device.

  4. To access Nodegrid unit, use one of these options:

    • Connect a terminal/workstation to the Nodegrid console port (RJ-45 console adapter) and a straight-through network cable.

    • Connect a HDMI monitor (HDMI port) and USB keyboard (USB port).

  5. Power on the device.

  6. Wait for the BIOS setup page to appear and disappear.

  7. If PXE boot is enabled, wait for it to finish or press the 'Esc' key to cancel PXE boot.

  8. A blank screen appears for 3 seconds. Press 'Esc' key during these 3 seconds to show another GRUB menu.

  9. The GRUB menu shows 3 options: Nodegrid Platform - Chain boot, Nodegrid Platform - Rescue Mode, and Nodegrid Platform - Secure Erase. Select Nodegrid Platform - Secure Erase.

    Text

                                 GNU GRUB version 2.00
    
     +--------------------------------------------------------------------------+
     |Nodegrid Platform - Chain boot                                            |
     |Nodegrid Platform - Rescue Mode                                           |
     |Nodegrid Platform - Secure Erase  <--                                     |
     |                                                                          |
     |                                                                          |
     |                                                                          |
     +--------------------------------------------------------------------------+
      `Use the ^ and v keys to select which entry is highlighted.
      Press enter to boot the selected OS, `e' to edit the commands
      before booting or `c' for a command-line.`
    
  10. Type erase to permanently erase all data from the system:

    Text

    Nodegrid Boot live - Secure Erase 
    This action will completely erase the system. Using this procedure will destroy ALL 
    data on the SSD and render it unrecoverable even by data recovery services. After 
    executing this step, system software will no longer exist and must be reinstalled 
    via network. Type 'erase' to secure erase the SSD or 'cancel' to reboot:
    

    Note:

    Secure Erase requires the device be power cycled (powered off and powered on) prior to the erase command execution. Otherwise, the following message displays and the system halts to allow the power cycle to be done.

    Operation	not	supported.	Unit	must	be	power	cycled	prior	to	erase	command.	
    Wait	for	system	halt	and	power	cycle	the	unit.		
    [				4.614365]	reboot:	System	halted	

    This message may also appear if the BIOS version does not support this operation.

  11. Confirming Secure erase.

    Secure	erase	cannot	be	canceled	once	confirmed.	
    Type	'yes'	to	confirm	secure	erase:	
  12. Wait for the following message:

    'System	halted'.	
    Secure	erase	of	SDD	will	start	now…	security_password="PasSWorD"
    	
    /dev/sda:	
    Issuing	SECURITY_SET_PASS	command,	password="PasSWorD",	user=user,	mode=high	
    security_password="PasSWorD"
    
    /dev/sda:	
    Issuing	SECURITY_ERASE	command,	password="PasSWorD",	user=user	
    
    Secure	erase	completed.	System	halting…	
    [	29.083186]	reboot:	System	halted
  13. Power off the unit.

You can find a copy of the Letter of Volatility here.