...
Back to glossary

Sanitize-Befehl (ATA/SCSI)

In brief

The Sanitize command is a firmware command defined in ATA, SCSI, and NVMe standards with which a drive erases all user data in all storage areas – including caches and spare blocks. Depending on the drive, it offers the Block Erase, Crypto Erase, and Overwrite methods. For IT decommissioning, it is regarded as one of the most thorough erasure methods that a drive can carry out itself.

The three Sanitize methods

Method Effect Typical for
Block Erase Physically resets all flash blocks SSDs
Crypto Erase (called "Crypto Scramble" in ATA) Replaces the internal encryption key Self-encrypting drives
Overwrite Overwrites all areas with a pattern Hard drives

A drive itself reports which methods it supports. Once a Sanitize operation is running, it cannot be aborted. If the power fails, the drive resumes the erasure at the next start. Until it is complete, no data is readable.

Difference from Secure Erase

The older command Secure Erase refers to the user data areas and leaves manufacturers a lot of latitude. Sanitize expressly requires that all areas be covered, including those that the computer cannot address. The US guideline NIST SP 800-88 therefore generally assigns Sanitize methods to the "Purge" level. However, the quality still depends on the firmware, and the command alone does not provide proof. Second IT erases with Blancco, which uses the appropriate method for each drive and documents every erasure in a digitally signed certificate. More on the certified data deletion.

Frequently asked questions about the Sanitize command

Does every SSD support the Sanitize command?

No. Many current SSDs offer it; older or very inexpensive models do not always. Erasure software queries the drive for the supported functions.

Can a Sanitize operation be aborted?

No. Once started, it runs to the end, even after a power failure. That way no half-erased state is left behind.

Is there Sanitize for NVMe as well?

Yes. NVMe drives have their own Sanitize command with comparable methods. In addition, there is the NVMe Format command with an erase option.

Is the ATA Sanitize command proof of erasure?

No. The quality still depends on the firmware, and the command alone does not provide proof. For that you need a report for each drive, for example in the form of an erasure certificate with a serial number.

Is Sanitize a Purge method under NIST?

Generally yes. The US guideline NIST SP 800-88 assigns Sanitize methods to the Purge level because they are meant to cover all areas, including caches and spare blocks. How thoroughly a drive implements this depends on the firmware.

Erase SSDs and HDDs thoroughly – with a certificate per serial number.

Send us your device list. You will receive your offer in 48 hours on average.

Request for offer

Skip to content