You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 8 Next »

There is an on-going issue with multiple Lenovo machines equipped with NVMe drives where the erasure fails due to failing firmware erasure commands. The root cause of this issue is a security feature enabled within Lenovo's firmware which prevent executing required erasure commands successfully. This being the case, the issue occurs in all versions of Blancco Drive Eraser and any erasure tools using the Purge Level Erasure Standard.

This issue has been identified for the following machines (with NVMe drives):

  • Lenovo Thinkpad T460s, T470, T470s, X270
  • Lenovo Yoga 370, X380
  • Lenovo ThinkCentre M715q, M910
  • Lenovo X1 Carbon

As this issue prevents Blancco from running the firmware erasure commands, Purge-level erasure cannot be achieved when erasing the drive on its original host machine. Clear-level erasure result can be achieved with the traditional overwriting. If Purge-level result is required, the NMVe drive should be erased by connecting it to another host machine which allows Blancco software to execute needed firmware based erasure commands.

As Blancco continues to work with Lenovo support, it is also recommended that our customers engage Lenovo directly to report such issue if impacting production environments. If you are experiencing this issue, please submit a new support ticket with the details of the affected machines and issue reports from the machines, and we will continue to collect all customer reports.


Update Nov 2, 2018:

Thus far, Lenovo has been unwilling to make changes to this feature.  We still recommend customers to create a support case with Lenovo if possible.

Workarounds:

  1. Remove the drive from the unit, then erase using NIST Purge Level
  2. Erase using NIST Clear Level
  3. BDE 6.6 will include a feature with fallback functionality specific to NIST.  If NIST Purge fails, the customer can automate the workflow to subsequently run NIST Clear.
  • No labels