Remove Data from Nonvolatile Memory

Soft Removal of User Data from Nonvolatile Memory

Removes files and installs factory default configuration on flash disk.

Restore Factory Default Configuration

1. Shutdown Nodegrid device and power off.

2. To remove the device from the network, disconnect Ethernet cables.

3. Disconnect any USB storage device and USB network device connected to Nodegrid device.

4. To access Nodegrid unit, use one of these options:

   • Connect a terminal/workstation to the Nodegrid console port (RJ-45 console adapter) and a straight-through network cable.

   • Connect a HDMI monitor (HDMI port) and USB keyboard (USB port).

5. Power on the device.

6. On the following menu, select Nodegrid Manager - Rescue Mode.

    ****************************************************************************
    *Nodegrid Manager <version>                                                *
    *Nodegrid Manager <version> - Factory Default Settings                     *
    *Nodegrid Manager <version> - Rescue Mode       <--                        *
    *Nodegrid Manager <version> - Network boot                                 *
    *Nodegrid Manager <version> (verbose)                                      *
    *                                                                          *
    *                                                                          *
    *                                                                          *
    *                                                                          *
    *                                                                          *
    ****************************************************************************
   ` Use the * and * keys to select which entry is highlighted.
     Press enter to boot the selected OS, `e' to edit the commands
     before booting or `c' for a command-line.`
   

7. At the prompt ("bash-4.3#"), run this command (erases all files and loads factory configuration):

   apply_settings --factory-and-cleanlogs -f -h
   

8. Wait for this message:

   TextText

   Apply factory settings completed.  INIT: 
   Switching [ ... ] reboot: System halted
   

9. Power off the unit.

Hard Removal - Secure Erase

This completely erases the flash disk. This procedure destroys ALL data on flash disk and render it unrecoverable even by data recovery services. After that, the Nodegrid software must be reinstalled via network.

Fully Erase Nonvolatile Memory

1. Shutdown Nodegrid device and power off.

2. To remove the device from the network, disconnect Ethernet cables.

3. Disconnect any USB storage device and USB network device connected to device.

4. To access Nodegrid unit, use one of these options:

   • Connect a terminal/workstation to the Nodegrid console port (RJ-45 console adapter) and a straight-through network cable.

   • Connect a HDMI monitor (HDMI port) and USB keyboard (USB port).

5. Power on the device.

6. When the BIOS setup page appears, press the 'Esc' key.

7. In the Grub Menu, select Nodegrid Platform - Secure Erase.

   TextText

                                GNU GRUB version 2.00
   
    +--------------------------------------------------------------------------+
    |Nodegrid Platform - Chain boot                                            |
    |Nodegrid Platform - Rescue Mode                                           |
    |Nodegrid Platform - Secure Erase  <--                                     |
    |                                                                          |
    |                                                                          |
    |                                                                          |
    +--------------------------------------------------------------------------+
     `Use the ^ and v keys to select which entry is highlighted.
     Press enter to boot the selected OS, `e' to edit the commands
     before booting or `c' for a command-line.`
   

8. Type erase to permanently erase all data from the system:

   TextText

   Nodegrid Boot live - Secure Erase 
   This action will completely erase the system. Using this procedure will destroy ALL 
   data on the SSD and render it unrecoverable even by data recovery services. After 
   executing this step, system software will no longer exist and must be reinstalled 
   via network. Type 'erase' to secure erase the SSD or 'cancel' to reboot:
   

   Note:

   Secure Erase requires the device be power cycled (powered off and powered on) prior to the erase command execution. Otherwise, the following message displays and the system halts to allow the power cycle to be done.

   Operation	not	supported.	Unit	must	be	power	cycled	prior	to	erase	command.	
   Wait	for	system	halt	and	power	cycle	the	unit.		
   [				4.614365]	reboot:	System	halted	

9. Confirming Secure erase.

   Secure	erase	cannot	be	canceled	once	confirmed.	
   Type	'yes'	to	confirm	secure	erase:	

10. Wait for the following message:

    'System	halted'.	
    Secure	erase	of	SDD	will	start	now…	security_password="PasSWorD"
    	
    /dev/sda:	
    Issuing	SECURITY_SET_PASS	command,	password="PasSWorD",	user=user,	mode=high	
    security_password="PasSWorD"
    
    /dev/sda:	
    Issuing	SECURITY_ERASE	command,	password="PasSWorD",	user=user	
    
    Secure	erase	completed.	System	halting…	
    [	29.083186]	reboot:	System	halted

11. Power off the unit.

You can find a copy of the Letter of Volatility here.