This article explains how to conduct secure erasure on a computer using the Department of Defense Standard (DoD). This will be used to prepare systems supported by the OIT Managed Desktop Service for surplus. OIT Managed Desktops will erase or destroy electronic media as part of our service.
Please review the OIT Managed Desktop Service policy on Erasure of Media & Drives Before Surplus if you have questions regarding the general policy.
Information
Prerequisites
You will need:
- A USB key
- A general-use computer or laptop that will be repurposed or surplussed and sent to the NCSU warehouse for possible resale, or,
- A PCI-compliant computer or laptop that was previously used to process payments that will be repurposed or surplussed and sent to the NCSU warehouse for possible resale.
Quick Procedure Walk Through
- Log in with your Unity ID and password to https://oit.ncsu.edu/campus-it/data-removal/hard-disk-erasing-with-active-killdisk-for-pcs/
- Download the .iso file from the KillDisk link.
- Download and install Virtual Clone Drive from here: https://www.elby.ch/en/products/vcd.html (only needed for pre-Windows 10 systems)
- Go to downloaded .iso file, right click, and choose "Mount files with Virtual Clone drive (pre Win10) or just Mount." You may need to choose "open" or "open with" first. You will then see a BDRom drive listed in your drives. This is the expanded .iso files.
- Create a bootable USB drive with KillDisk.ISO: https://technet.microsoft.com/en-us/library/jj200124.aspx
- Drag and drop all of the expanded .iso files from the downloaded ISO to the root of the USB drive.
- With the PC or laptop powered off, insert the USB drive into the machine that you want to wipe.
- Power on the PC or laptop while pressing the F12 key repeatedly to bring up the boot menu.
- Choose the USB device.
- Once the system boots to the Active KillDisk application, select the drives that need to be erased. Be sure not to select your USB drive.
- Select the "Kill" icon at the top of the screen. A menu will appear.
- Choose the US DoD 5220.22-< (3 passes, verify) option.
- Choose the options that apply. For example, you can direct it to save a log file to the root of your USB drive, if you need to. You can add information such as your name and comments under More Options-Logo/Technician info tab.
- Click Save.
- Click Start.
- Type in ERASE-ALL-DATA and click OK.
- The process may take several hours. Onscreen menus will allow you to monitor progress, as well as alert you when the process is complete.
See http://www.killdisk.com/screen.htm for additional screenshots and instructions.
Additional Resources
After erasing the hard-drive, please be sure to use the most current label to attest its erasure.
Escalation
Any questions on process or content contained in this document should be escalated through the NCSU Help desk and a have an incident assigned to the OIT_DESKTOP_SUPPORT team.
Related Documentation
http://www.killdisk.com/screen.htm
https://oit.ncsu.edu/campus-it/data-removal/hard-disk-erasing-with-active-killdisk-for-pcs/
https://www.elby.ch/en/products/vcd.html
https://technet.microsoft.com/en-us/library/jj200124.aspx
https://oit.ncsu.edu/campus-it/data-removal/
https://procurement.ofa.ncsu.edu/our-services/surplus/disposal/#electronic
https://ncsu.service-now.com/sp?id=kb_article&sys_id=307c8e53dbc6f3402fa0791c8c9619ec
Title: Use Killdisk to Securely Erase Electronic Media