ChromeOS devices wipe confirmation

[janusz...@gmail.com]

Hi guys,

Might be kinda unusual question. I run small repair shop where I refurbish chromebooks as well as windows/apple/android devices. Since May this year a new law is going to be introduced within the EU (GDPR) which basically forces us to prove that every device that went through our shop got previous customer data wiped. Otherwise we might get 50k+ fine for a single device (yes, we’ll go broke immediately :D ). We use blancco to do wipes on windows/iOS/MacOS/android. That blancco software has its own DB, so in case of any inspection we can prove that wipes have been done. But it is a bit different with chromebooks where all we could do so far is a factory reset with no further confirmation that it was done. Do you know how we can sort this problem out? Can you recommend any software?

 

 

Regards,

Boryga

[Keith I Myers]

Good Morning,

To be honest, I have looked into the underpinnings on how ChromeOS handles wiping and it is honestly impossible to recover data from it. There is no third party software that can do a better job. 

Here is the design documentation for the powerwash - https://www.chromium.org/chromium-os/chromiumos-design-docs/powerwash

Basically, when a power wash is triggered, all encryption keys are immediately revoked, rendering the contents of the disk unusable. The powerwash then calls /sbin/clobber-state which overrides the disk with /dev/zero

You can look at clobber-state here - https://chromium.googlesource.com/chromiumos/platform2/+/master/init/clobber-state

It is worth noting that there are a few files preserved such as the enterprise enrollment data

--
--
Chromium OS discuss mailing list: chromium-os-discuss@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

--

Keith I Myers http://KMyers.me https://Kiddie.Networks - Cheap Web Hosting Services ran by kids Mobile : (305)-929-3475

[Mike Frysinger]

you could transition into dev mode, let it wipe, then transition back into normal mode and let it wipe.  at some point along the way, there will be screens w/serial numbers displayed you could take a picture of.

otherwise, no, i don't think there's any custom software you could run to give you a "receipt" that the device has been wiped.

-mike

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org

View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.

To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.