# systemctl -i suspend # nvme format /dev/nvme0 -ses=1 Success formatting namespace:ffffffff 5. If errors were encountered, suspend and resume computer then re-run # nvme format /dev/nvme0 -ses=1 NVME Admin command error:INVALID_FORMAT(410a) Issue Secure Erase command # nvme format /dev/nvme0 -ses=1 Success formatting namespace:ffffffff 4. This device supports User Data Erase (value 1 in above table), but not Cryptographic Erase (value 2 in above table). : 0 Crypto Erase Not Supported as part of Secure Erase Verify Secure Erase support # nvme id-ctrl -H /dev/nvme0 NVME Identify Controller: Node SN Model Namespace Usage Format FW Rev The nvme-cli README.md includes installation instructions for a number of Linux distributions, though building is as simple as make & make install. The Cryptographic Erase erases all user content present in the NVM subsystem by deleting the encryption key with which the user data was previously encrypted. The User Data Erase erases all user content present in the NVM subsystem. NVM Express Base Specification Revision 1.3c states:Īs part of the Format NVM command, the host may request a secure erase of the contents of the NVM. This is accomplished by deleting the encryption key. The controller may perform a cryptographic erase when a User Data Erase is requested if all user data is encrypted.Ĭryptographic Erase: All user data shall be erased cryptographically. User Data Erase: All user data shall be erased, contents of the user data after the erase is indeterminate (e.g., the user data may be zero filled, one filled, etc). The erase applies to all user data, regardless of location (e.g., within an exposed LBA, within a cache, within deallocated LBAs, etc). Secure Erase Settings: This field specifies whether a secure erase should be performed as part of the format and the type of the secure erase operation. Nvme-format, part of nvme-cli (NVMe management command line interface), offers two Secure Erase options: (Also in this series: ATA Sanitize Device and hdparm, ATA Secure Erase (SE) and hdparm, and NVMe Sanitize.) Introduction NVMe Secure Erase / docs / NVMe Secure Erase