Does the IBM System i System Initialize Its Disk Units to the DoD 5220.22-M Standard

Resolving The Problem

This document describes disk unit initialization with regard to DoD 5220.22-M standards.

With many users required to follow HIPAA (or Protected Health Information / PHI) guidelines, it has been asked if the data on the IBM System i (AS400) disk units are safe if they are removed from the ASP and initialized. When you select the option to Remove Units from Configuration within Dedicated Service Tools, the system clears the first two pages on the disk unit(s). This means only the first 8 KB is cleared. If you select Delete disk unit data, whether in Service Tools or Dedicated Service Tools, this will perform one complete pass (zeroing out all the pages on the disk) on a non-configured disk unit. Currently there are no SLIC tools to clear a disk unit to the Department of Defense's 5220.22-M standard. In addition, no third-party party application can have access to a non-configured disk unit. Therefore, there is currently nothing available for the System i™ system.

The options to ensure no data recovery resides on a disk unit is to physically destroy that disk unit or contact an IBM marketing representative to purchase the IBM Disk Sanitizer for i5/OS PRPQ available at R530 and later. For more information about this option, refer to Rochester Support Center knowledgebase document N1014286, Sanitize Disk PRPQ Announcement Letter and Readme Information. To link to document N1014286 immediately, click here www-01.ibm.com/support/docview.wss?uid=nas8N1014286 .

Note: This is not a Software Maintenance Agreement or consulting function.