Appendix

priv install package

Installs the HX Data Platform encryption package.

priv install package {flags}

Syntax Description

Option

Required or Optional

Description
--local

Installs the package on the current node of the cluster.
--cluster

Installs the package on all the available nodes of the cluster. If any node/s is/are not available then the package will not be installed on that/those node/s.

Note

 

Valid only if the current state of the cluster is HEALTHY/WARNING.

--path

Path to the package.
Table 1. Command History

HX Release

Modification

5.0(1b)

This command was introduced in Cisco HX Release 5.0(1b).

Command Default

Default (or None.)

Usage Guidelines

Example: Accompany the priv install package command with one of the positional arguments enclosed in { } or optional arguments enclosed in [ ].

secure disk erase

A disk erase utility that provides the option to do a basic(Mode '0') and standard(Mode '1'/Mode '2') sanitization of the disk.


Note

  • For the standard mode erase, you can trigger the secure erase operation on the drive and the progress status can be tracked using the --progress option.

  • Multiple pass overwrite and user specified pattern is only allowed for HDD and not for SSD.

  • To skip the last primary copy check, you can use --skip-last-primary-check option, which skips the last primary copy check for the disk. This flag can be used in the case when the node is not part of the cluster, or the node is in some intermediate state, or the cluster is in offline state. Please be aware that if the drive contains the last primary copy of the data then there is permanent data loss.

  • If Reboot/Power is interrupted while secure disk eraseis in-progress and when the power is restored, the disk may not show up in the controller VM. In this case, you need to wait for the estimated time while the erase finishes in the background and then reboot the controller node. Estimated time is determined by using the below erase rate: 

    For HDD average erase rate is ~2hours/TB.
For SDD average erase rate is ~2Mins/TB.

    Note

    Total estimated time is proportional to the number of overwrite counts.

secure_disk_erase {flags}

Syntax Description

Option

Required or Optional

Description
-h, --help

Optional

Displays help for secure disk erase command.
-d, --disk-path

Required

Specifies the absolute path of the target disk.

Note

 

A warning is displayed before you run this command.

admin:~$ secure_disk_erase -d /dev/sde THIS UTILITY WILL IRRECOVERABLY ERASE DATA FROM DRIVE.PROCEED WITH CAUTION. storfs signature from the disk /dev/sde will be destroyed, proceed [Y/N]:Y Successfully removed the disk from the system: '/dev/sde' Starting basic erase for disk '/dev/sde' Erase successfully for disk /dev/sde.
-m, --mode

Optional

Indicates the mode {0,1,2}. The erase modes are:

  • (default: 0): 0 - Erase only storfs signature from the disk.

  • 1 - Single pass full disk erase.

  • 2 - 3 pass full disk erase (Valid only for HDD).
-p, --erase-pattern

Optional (Valid only for HDD)

Any erase pattern.

-o, --overwrite-count

Optional (Valid only for HDD)

The number of overwrite count (>0).

-s, --skip-last-primary-check

Optional

Skips the last primary check for the disk. Allowed only if the node is not part of the active cluster.

-r, --progress

Optional

Checks the secure erase progress for the given disk. Progress is displayed only if the active erase operation is in progress for the disk.

Table 2. Command History

HX Release

Modification

5.0(1b)

This command was introduced in Cisco HX Release 5.0(1b).

Command Default

Default (or None.)

Usage Guidelines

Example: Accompany the secure disk erase command with one of the positional arguments enclosed in { } or optional arguments enclosed in [ ].