ATA Secure Erase vs Enhanced Secure Erase
Both commands tell an ATA drive to erase itself. The difference is one word — and for a drive leaving your control, it matters.
ATA drives (SATA SSDs and hard drives) support two erase commands: Secure Erase and Enhanced Secure Erase. They're issued the same way and look the same from the outside — but they guarantee different things.
What Secure Erase does
Secure Erase instructs the drive's controller to erase all user data. On an SSD it resets the flash cells; on a hard drive it overwrites the sectors. For most purposes it's a complete erasure, and it maps to NIST 800-88 Clear.
What Enhanced Secure Erase adds
Enhanced Secure Erase does everything Secure Erase does, plus one more thing: it also erases sectors that were written and then reallocated — for example, a sector that developed a fault and was silently replaced with a spare. Data remnants can linger in those remapped areas, and Enhanced Secure Erase is defined to cover them. That's why it maps to NIST 800-88 Purge.
Which should you choose?
| Secure Erase | Enhanced Secure Erase | |
|---|---|---|
| Erases reallocated sectors | Not guaranteed | Yes |
| NIST 800-88 | Clear | Purge |
| Use when | Redeploying internally | Drive leaves your control |
The practical rule is simple: if the drive supports Enhanced Secure Erase and the data is leaving your organisation — resale, return, recycling, repair — use it. For a drive staying in your own racks, Secure Erase is sufficient.
What if only Secure Erase is supported?
Not every drive implements Enhanced Secure Erase. In that case you have two honest options: accept a Clear-level outcome (fine for internal reuse), or move to a different method — on NVMe drives, a Sanitize with cryptographic or block erase reaches Purge. tScrub records exactly which method ran, so the report reflects reality rather than aspiration.
FAQ
Can I tell which commands a drive supports?
Yes — the drive's identify data advertises its erase capabilities. tScrub reads this during discovery and picks the strongest supported method automatically.
Is Enhanced Secure Erase slower?
It can take slightly longer on hard drives because it's covering remapped areas too, but it's the same order of magnitude as Secure Erase — and far faster than any software overwrite.