---
title: "What are HPAs and DCOs and why do they matter?"
canonical: "https://support.blancco.com/space/KB/11633160/What%20are%20HPAs%20and%20DCOs%20and%20why%20do%20they%20matter%3F"
format: markdown
---
<span style="color: #000000">**What is the HPA?**</span>

<span style="color: #000000">The Host Protected Area (HPA) is an area of memory on a hard drive that is not normally visible to a computer’s Operating System (OS) – for example, it would not be available for the user to store files on. It was implemented so information could be stored that is not easily modified, changed, or accessed by the user, BIOS, or the OS. This means that a drive may contain more than the ‘advertised’ capacity. This part can only be made accessible using specific tools or commands.</span>

<span style="color: #000000">There are numerous reasons why an HPA is created on a drive:</span>

- <span style="color: #000000">A vendor can store the necessary files to install or recover the computer’s operating system i.e. perform a factory reset.</span>
- <span style="color: #000000">Other software may be installed here such as diagnostic programs or other utilities.</span>
- <span style="color: #000000">Some malware may hide inside the HPA to avoid detection.</span>
- <span style="color: #000000">Users who wish to go to great lengths to hide data may utilise the HPA. (This would require a degree of skill beyond that of regular computer users)</span>

**<span style="color: #000000">What is the DCO?</span>**  
<span style="color: #000000">Computer system vendors may use the Device Configuration Overlay (DCO) when they wish to have a series of hard drives of varying capacities (possibly because they are from different vendors) that all exhibit the exact same storage volume from the perspective of the OS. For example, the hard drives that a vendor wishes to deploy in their systems may contain more addressable areas (i.e. storage capacity) than is required. Using the DCO feature, the vendor could modify these drives so they consistently display the same amount of usable storage. They effectively hide the additional areas from the user’s view without any indication that they even exist.</span>

**<span style="color: #000000">Why do these matter?</span>**  
<span style="color: #000000">If the DCO or HPA area is not removed by our software then it is not possible to overwrite the data in these areas as it is inaccessible. It is the requirement of some overwriting standards to remove and erase these hidden areas. Failure to remove these can impact on the perceived success of the erasure process. The theory behind this requirement is that both areas could potentially contain some kind of remnant data and they should be removed in order to ensure that all of the potentially user addressable areas are available for erasure.</span>

<span style="color: #000000">Blancco erasure software currently has the capability to remove DCO and HPA areas but the possibility to do this requires that the BIOS on a computer does not freeze lock the necessary commands. More information about freeze locks can be found in another FAQ article – </span>[<span style="color: #000000">here</span>](https://support.blancco.com/display/KB/Freeze+Lock+Removal%3A+what+it+is+and+how+to+remediate+possible+issues)<span style="color: #000000">. More information about HPA/DCO removal reporting can be found in another FAQ article – </span>[<span style="color: #000000">here</span>](https://support.blancco.com/display/KB/Report+messages+related+to+hidden+area+handling)<span style="color: #000000">.</span>

**<span style="color: #000000">Further Reading</span>**

- <span style="color: #000000">Gupta M., Hoeschele M., Rogers M., Hidden Disk Areas: HPA and DCO, International Journal of Digital Evidence, Purdue University, 2006. </span>[<span style="color: #000000">http://www.utica.edu/academic/institutes/ecii/publications/articles/EFE36584-D13F-2962-67BEB146864A2671.pdf</span>](http://www.utica.edu/academic/institutes/ecii/publications/articles/EFE36584-D13F-2962-67BEB146864A2671.pdf)
- <span style="color: #000000">Wikipedia’s entry on HPA: </span>[<span style="color: #000000">http://en.wikipedia.org/wiki/Host_protected_area</span>](http://en.wikipedia.org/wiki/Host_protected_area)<span style="color: #000000"> </span>
- <span style="color: #000000">Wikipedia’s entry on DCO: </span>[<span style="color: #000000">http://en.wikipedia.org/wiki/Device_Configuration_Overlay</span>](http://en.wikipedia.org/wiki/Device_Configuration_Overlay)<span style="color: #000000"> </span>

> Macro (__confluenceADFMigrationUnsupportedContentInternalExtension__)