How many authentication attempts have to occur before NSE drives self-sanitize?
Applies to
- ONTAP 9
- NetApp Storage Encryption
- External Key-Management
Answer
- NSE drives have a built-in self-sanitization feature
- If more than 1024 authentication attempts to the external key manager have failed, the drive will drop its internal Data Encryption Key (DEK).
- When this occurs, all data on the drives will be lost and cannot be reverted.
Additional Information
As long as a node remains at the loader prompt and is not in a boot loop, authentication attempts will not be made therefore the count will not be increased.