Skip to content 
Firmware-basierte Löschung
In brief
Firmware-based erasure refers to erasure methods that are not carried out by software in the operating system but by the drive's own built-in control software. A command such as Sanitize, Secure Erase or NVMe Format causes the drive controller to erase all memory areas, including those that cannot be addressed from outside. For SSDs it is often the most effective way to remove data before reuse.
The most important firmware commands
| Command | Interface | Effect |
|---|---|---|
| Secure Erase / Enhanced Secure Erase | ATA (SATA) | Erases the user area, Enhanced also reallocated areas |
| Sanitize (Block Erase, Overwrite, Crypto Scramble) | ATA, SCSI/SAS | Erases all memory areas including caches and spare blocks |
| NVMe Format, NVMe Sanitize | NVMe | Erasure or cryptographic erasure of the namespaces or the entire drive |
With self-encrypting drives, the firmware can also replace the key. This is a Crypto Erase.
Strengths and limits
The advantage: only the controller knows all physical storage locations of an SSD, including the reserve created by wear leveling and over-provisioning. Overwriting from outside does not reliably reach these areas. The limit: whether the command is implemented correctly depends on the manufacturer. Some drives do not support all commands or block them through a lock in the BIOS. That is why every firmware-based erasure must include a check of the result and a report. Which method suits which data carrier is explained in the guide Securely erasing hard drives and SSDs.
Second IT erases data carriers with Blancco and documents every erasure with a digitally signed certificate per device. More on the certified data deletion.
Frequently asked questions about firmware-based erasure
Is firmware erasure more secure than overwriting?
For SSDs usually yes, because it also covers non-addressable areas. For HDDs both methods are effective if hidden areas are taken into account.
Can I trigger firmware commands myself?
Technically yes, with manufacturer tools or specialized software. For companies, however, a verifiable proof per data carrier is then often missing.
What if a drive does not support the command?
Then another method is used. If no secure erasure can be demonstrated, the data carrier is destroyed.
What is the difference between Secure Erase and Sanitize?
Secure Erase is an ATA command for SATA drives. It erases the user area, the extended variant also reallocated areas. Sanitize exists for ATA and SCSI/SAS. It erases all memory areas including caches and spare blocks.
Why does overwriting not reach all data on SSDs?
Only an SSD's controller knows all physical storage locations. Wear leveling and over-provisioning create a reserve that cannot be reliably reached from outside. Firmware commands cause the controller to erase these areas as well.
Erase SSDs correctly – verified and with a certificate per device.
Send us your device list. You will receive your offer in 48 hours on average.