Skip to content 
Enhanced Secure Erase
In brief
Enhanced Secure Erase is the extended variant of the ATA command "Security Erase Unit", with which a drive erases itself. Unlike the normal variant, it is intended to overwrite all user data areas, including no-longer-used, relocated sectors, with a manufacturer-defined pattern or, on encrypting drives, to renew the key. How thoroughly this actually happens depends on the manufacturer's firmware.
Normal and Enhanced compared
| Mode | What is overwritten |
|---|---|
| Secure Erase (normal) | The data areas addressable by the user, usually with zeros or ones |
| Enhanced Secure Erase | All user data areas including reallocated sectors, with a pattern defined by the manufacturer |
For the command to be executed, a security password must be set temporarily on the drive. Many BIOS versions put drives into a locked state ("frozen") at startup, which blocks the command.
Limits in practice
Whether a drive supports Enhanced Secure Erase and what exactly it does can only be checked to a limited extent from outside. For SSDs, newer commands such as the Sanitize command or a Crypto Erase are often the better choice. For companies, the following also applies: a command alone is not evidence. A report with method, result and serial number is needed. Which method suits which drive is explained in our guide Securely erasing hard drives and SSDs. Second IT erases with Blancco and creates a digitally signed erasure certificate per device.
Frequently asked questions about Enhanced Secure Erase
Is Enhanced Secure Erase more secure than normal Secure Erase?
In principle yes, because relocated sectors are also intended to be covered. The actual effect, however, depends on the manufacturer's implementation.
Does Enhanced Secure Erase work on NVMe SSDs?
No, it is an ATA command for SATA drives. NVMe SSDs use their own commands such as Format or Sanitize.
Are HPA and DCO also erased in the process?
That is not guaranteed. Hidden areas should be detected before erasure and removed where necessary.
Why can Enhanced Secure Erase sometimes not be executed?
Many BIOS versions put drives into a locked state ("frozen") at startup, which blocks the command. In addition, a security password must be set temporarily on the drive for execution.
Is Enhanced Secure Erase proof of erasure?
No. A command alone is not evidence. A report with method, result and serial number is needed. For SSDs, newer commands such as the Sanitize command or Crypto Erase are often the better choice.
Erasure with proof instead of a command without evidence.
Send us your device list. You will receive your offer in 48 hours on average.