
Sanitize-Befehl (ATA/SCSI)
In brief
The Sanitize command is a firmware command defined in ATA, SCSI, and NVMe standards with which a drive erases all user data in all storage areas – including caches and spare blocks. Depending on the drive, it offers the Block Erase, Crypto Erase, and Overwrite methods. For IT decommissioning, it is regarded as one of the most thorough erasure methods that a drive can carry out itself.
The three Sanitize methods
| Method | Effect | Typical for |
|---|---|---|
| Block Erase | Physically resets all flash blocks | SSDs |
| Crypto Erase (called "Crypto Scramble" in ATA) | Replaces the internal encryption key | Self-encrypting drives |
| Overwrite | Overwrites all areas with a pattern | Hard drives |
A drive itself reports which methods it supports. Once a Sanitize operation is running, it cannot be aborted. If the power fails, the drive resumes the erasure at the next start. Until it is complete, no data is readable.
Difference from Secure Erase
The older command Secure Erase refers to the user data areas and leaves manufacturers a lot of latitude. Sanitize expressly requires that all areas be covered, including those that the computer cannot address. The US guideline NIST SP 800-88 therefore generally assigns Sanitize methods to the "Purge" level. However, the quality still depends on the firmware, and the command alone does not provide proof. Second IT erases with Blancco, which uses the appropriate method for each drive and documents every erasure in a digitally signed certificate. More on the certified data deletion.
Frequently asked questions about the Sanitize command
Does every SSD support the Sanitize command?
No. Many current SSDs offer it; older or very inexpensive models do not always. Erasure software queries the drive for the supported functions.
Can a Sanitize operation be aborted?
No. Once started, it runs to the end, even after a power failure. That way no half-erased state is left behind.
Is there Sanitize for NVMe as well?
Yes. NVMe drives have their own Sanitize command with comparable methods. In addition, there is the NVMe Format command with an erase option.
Is the ATA Sanitize command proof of erasure?
No. The quality still depends on the firmware, and the command alone does not provide proof. For that you need a report for each drive, for example in the form of an erasure certificate with a serial number.
Is Sanitize a Purge method under NIST?
Generally yes. The US guideline NIST SP 800-88 assigns Sanitize methods to the Purge level because they are meant to cover all areas, including caches and spare blocks. How thoroughly a drive implements this depends on the firmware.
Related terms
Erase SSDs and HDDs thoroughly – with a certificate per serial number.
Send us your device list. You will receive your offer in 48 hours on average.