hdparms fails to secure erase SSD

Posted on

I'm trying to secure erase a SATA SSD using hdparm and it fails like this:

# hdparm --user-master u --security-set-pass foo /dev/sda
security_password: "foo"

/dev/sda:
 Issuing SECURITY_SET_PASS command, password="foo", user=user, mode=high
The running kernel lacks CONFIG_IDE_TASK_IOCTL support for this device.
SECURITY_SET_PASS: Invalid argument

I'm running RHEL 7.7 (3.10.0-1062.1.1.el7.x86_64)
The SSD is connected to a MegaRAID 9361 running in JBOD mode. I don't understand the "IDE" part of the error since this is SATA. I have done this successfully with the same hardware on older versions of CentOS.

[root@localhost ~]# storcli64 /c0 show 
Generating detailed summary of the adapter, it may take a while to complete.

CLI Version = 007.0606.0000.0000 Mar 20, 2018
Operating system = Linux 3.10.0-1062.1.1.el7.x86_64
Controller = 0
Status = Success
Description = None

Product Name = AVAGO JBOD
Serial Number = SK71279734
SAS Address =  500605b00d00e780
PCI Address = 00:04:00:00
System Time = 09/04/2019 15:18:24
Mfg. Date = 03/25/17
FW Package Build = 24.21.0-0095
BIOS Version = 6.36.00.3_4.19.08.00_0x06180203
FW Version = 4.680.00-8454
Driver Name = megaraid_sas
Driver Version = 07.707.50.00-rh1
Current Personality = JBOD-Mode 
Vendor Id = 0x1000
Device Id = 0x5D
SubVendor Id = 0x1000
SubDevice Id = 0x9A61
Host Interface = PCI-E
Device Interface = SAS-12G
Bus Number = 4
Device Number = 0
Function Number = 0
JBOD Drives = 8

JBOD LIST :
=========

---------------------------------------------------------------------------------------------
ID EID:Slt DID State Intf Med       Size SeSz Model                   Vendor   Port          
---------------------------------------------------------------------------------------------
 0 252:0     8 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 0 - 3 x1 
 1 252:1     9 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 0 - 3 x1 
 2 252:2    10 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 0 - 3 x1 
 3 252:3    11 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 0 - 3 x1 
 4 252:4    12 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 4 - 7 x1 
 5 252:5    13 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 4 - 7 x1 
 6 252:6    14 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 4 - 7 x1 
 7 252:7    15 Onln  SATA SSD 953.869 GB 512B Samsung SSD 850 PRO 1TB ATA      Port 4 - 7 x1 
---------------------------------------------------------------------------------------------

ID-JBOD ID|EID-Enclosure Device ID|Slt-Slot No.|DID-Device ID|Onln-Online|
Offln-Offline|Intf-Interface|Med-Media Type|SeSz-Sector Size

Physical Drives = 8

PD LIST :
=======

-------------------------------------------------------------------------------------
EID:Slt DID State DG       Size Intf Med SED PI SeSz Model                   Sp Type 
-------------------------------------------------------------------------------------
252:0     8 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
252:1     9 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
252:2    10 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
252:3    11 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
252:4    12 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
252:5    13 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
252:6    14 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
252:7    15 Onln  -  953.343 GB SATA SSD N   N  512B Samsung SSD 850 PRO 1TB U  JBOD 
-------------------------------------------------------------------------------------

EID-Enclosure Device ID|Slt-Slot No.|DID-Device ID|DG-DriveGroup
DHS-Dedicated Hot Spare|UGood-Unconfigured Good|GHS-Global Hotspare
UBad-Unconfigured Bad|Onln-Online|Offln-Offline|Intf-Interface
Med-Media Type|SED-Self Encryptive Drive|PI-Protection Info
SeSz-Sector Size|Sp-Spun|U-Up|D-Down/PowerSave|T-Transition|F-Foreign
UGUnsp-Unsupported|UGShld-UnConfigured shielded|HSPShld-Hotspare shielded
CFShld-Configured shielded|Cpybck-CopyBack|CBShld-Copyback Shielded

[root@localhost ~]# hdparm -I /dev/sda

/dev/sda:

ATA device, with non-removable media
    Model Number:       Samsung SSD 850 PRO 1TB                 
    Serial Number:      S3D2NX0J805110Z     
    Firmware Revision:  EXM04B6Q
    Transport:          Serial, ATA8-AST, SATA 1.0a, SATA II Extensions, SATA Rev 2.5, SATA Rev 2.6, SATA Rev 3.0
Standards:
    Used: unknown (minor revision code 0x0039) 
    Supported: 9 8 7 6 5 
    Likely used: 9
Configuration:
    Logical     max current
    cylinders   16383   16383
    heads       16  16
    sectors/track   63  63
    --
    CHS current addressable sectors:    16514064
    LBA    user addressable sectors:   268435455
    LBA48  user addressable sectors:  2000409264
    Logical  Sector size:                   512 bytes
    Physical Sector size:                   512 bytes
    Logical Sector-0 offset:                  0 bytes
    device size with M = 1024*1024:      976762 MBytes
    device size with M = 1000*1000:     1024209 MBytes (1024 GB)
    cache/buffer size  = unknown
    Form Factor: 2.5 inch
    Nominal Media Rotation Rate: Solid State Device
Capabilities:
    LBA, IORDY(can be disabled)
    Queue depth: 32
    Standby timer values: spec'd by Standard, no device specific minimum
    R/W multiple sector transfer: Max = 1   Current = 1
    DMA: mdma0 mdma1 mdma2 udma0 udma1 udma2 udma3 udma4 udma5 *udma6 
         Cycle time: min=120ns recommended=120ns
    PIO: pio0 pio1 pio2 pio3 pio4 
         Cycle time: no flow control=120ns  IORDY flow control=120ns
Commands/features:
    Enabled Supported:
       *    SMART feature set
            Security Mode feature set
       *    Power Management feature set
       *    Write cache
       *    Look-ahead
       *    Host Protected Area feature set
       *    WRITE_BUFFER command
       *    READ_BUFFER command
       *    NOP cmd
       *    DOWNLOAD_MICROCODE
            SET_MAX security extension
       *    48-bit Address feature set
       *    Device Configuration Overlay feature set
       *    Mandatory FLUSH_CACHE
       *    FLUSH_CACHE_EXT
       *    SMART error logging
       *    SMART self-test
       *    General Purpose Logging feature set
       *    WRITE_{DMA|MULTIPLE}_FUA_EXT
       *    64-bit World wide name
            Write-Read-Verify feature set
       *    WRITE_UNCORRECTABLE_EXT command
       *    {READ,WRITE}_DMA_EXT_GPL commands
       *    Segmented DOWNLOAD_MICROCODE
       *    Gen1 signaling speed (1.5Gb/s)
       *    Gen2 signaling speed (3.0Gb/s)
       *    Gen3 signaling speed (6.0Gb/s)
       *    Native Command Queueing (NCQ)
       *    Phy event counters
       *    READ_LOG_DMA_EXT equivalent to READ_LOG_EXT
       *    DMA Setup Auto-Activate optimization
            Device-initiated interface power management
       *    Asynchronous notification (eg. media change)
       *    Software settings preservation
            Device Sleep (DEVSLP)
       *    SMART Command Transport (SCT) feature set
       *    SCT Write Same (AC2)
       *    SCT Error Recovery Control (AC3)
       *    SCT Features Control (AC4)
       *    SCT Data Tables (AC5)
       *    reserved 69[4]
       *    DOWNLOAD MICROCODE DMA command
       *    SET MAX SETPASSWORD/UNLOCK DMA commands
       *    WRITE BUFFER DMA command
       *    READ BUFFER DMA command
       *    Data Set Management TRIM supported (limit 8 blocks)
Security: 
    Master password revision code = 65534
        supported
    not enabled
    not locked
    not frozen
    not expired: security count
        supported: enhanced erase
    2min for SECURITY ERASE UNIT. 2min for ENHANCED SECURITY ERASE UNIT.
Logical Unit WWN Device Identifier: 5002538c4075ed8a
    NAA     : 5
    IEEE OUI    : 002538
    Unique ID   : c4075ed8a
Device Sleep:
    DEVSLP Exit Timeout (DETO): 50 ms (drive)
    Minimum DEVSLP Assertion Time (MDAT): 30 ms (drive)
Checksum: correct

Responses