FDRERASE is the first z/OS secure disk erase utility to earn international CCEVS EAL2+ validation. It can quickly and securely erase data from z/OS disk with the minimum of CPU resources and in the minimum elapsed time.
There are many times when you may wish to insure that your z/OS data has been securely erased, including at the end of a disaster test, or when leaving the DR site after a real disaster. You may also wish to securely erase data when disconnecting a disk control unit (perhaps after moving all data with FDRPAS), or prior to re-using existing disk volumes for new purposes.
FDRERASE offers several levels of data erasure:
- The ERASE function overwrites every track with a single track-length record consisting of binary zeroes (or a user specified pattern). It meets the DoD/NCSC definition of “clearing” or “erasing” a disk and is usually adequate for erasing disks that will be sold, scrapped, or returned to the manufacturer.
- The SECUREERASE function overwrites every track with varying complementary patterns, from 3 to 32 passes per track. It meets the DoD/NCSC definition of “sanitizing” or “purging” a disk and can be used on your most sensitive data to make it very unlikely that the data could be recovered, even if the hard drives were removed and accessed elsewhere as FBA disks.
FDRERASE Performance
Performing a single overwrite, the ERASE function can erase approximately 1.5Tb of data (per DASD controller) in 1 hour. Two ERASE jobs (running against two separate DASD controllers) can erase approximately 3Tb in 1 hour.
Simulation
The SIMERASE function does not erase any data, but it will validate your control statements to ensure that the correct disk(s) will be selected for erasure. This is highly recommended.
EMPTYVTOC
The EMPTYVTOC feature reinitializes a disk with an empty VTOC. If present, the VTOCIX will be rebuilt. After the EMPTYVTOC has run, the emptied VTOC and the re-built VTOCIX will have the same size and location as the originals. This is a very quick way of initializing an empty volume (perhaps after a successful FDRPAS SWAP), although it doesn’t securely erase any data from the volume.
Flexible Licensing
FDRERASE can be licensed for a period of 90 days, 1 year or 3 years, and can also be licensed as an option to FDRPAS.