Efficient elimination of access to data on a writable storage media
A computer program product for eliminating access to data within a writable storage media cartridge includes a computer readable medium having program instructions embodied therewith. The program instructions are executable by a processing circuit to cause the processing circuit to determine whether a first portion of data on the writable storage media cartridge is encrypted, and determine whether key shredding is enabled. In response to determining that key shredding is not enabled, the processing circuit causes performance of a long erase on at least the encrypted first portion of data, and causes shredding of an encryption key related to said encrypted first portion of data.
1. A computer program product for eliminating access to data within a writable storage media cartridge, the computer program product comprising a non-transitory computer readable medium having program instructions embodied therewith the program instructions executable by a processing circuit to cause the processing circuit to:
determine, by the processing circuit, whether a first portion of data on the writable storage media cartridge is encrypted;
determine, by the processing circuit, whether key shredding is enabled;
in response to determining that key shredding is not enabled, causing, by the processing circuit, a long erase to be performed on at least the encrypted first portion of data; and
causing, by the processing circuit, an encryption key related to said encrypted first portion of data to be shredded.
2. The computer program product of claim 1 , comprising program instructions executable by the processing circuit to cause the processing circuit to determine that at least another portion of the writable storage media cartridge is not encrypted, and, in response, determine whether a previous long erase has been completed on writable storage media of said writable storage media cartridge.
3. The computer program product of claim 2 , program instructions executable by a processing circuit to cause the processing circuit to cause performance of the long erase on the writable storage media of the writable storage media cartridge in response to determining that the previous long erase has not been completed on the writable storage media of the writable storage media cartridge.
4. The computer program product of claim 3 , wherein the long erase is performed on the at least another portion of the writable storage media of the writable storage media cartridge.
5. The computer program product of claim 3 , program instructions executable by a processing circuit to cause the processing circuit to update a database in response to performing the long erase.
6. The computer program product of claim 1 , wherein the encryption key that is shredded is on the writable storage media cartridge.
7. The computer program product of claim 1 , wherein the writable storage media cartridge is a tape cartridge, and wherein the tape cartridge comprises tape media and a cartridge memory.
8. The computer program product of claim 7 , wherein the tape media comprises a non-user portion and the encryption key is stored on said non-user portion.
9. The computer program product of claim 7 , wherein the encryption key is stored on the cartridge memory.
10. The computer program product of claim 1 , wherein the shredding comprises overwriting the encryption key one or more times utilizing a data pattern that contains one of logical ones, zeroes, or some combination thereof.
11. A system for eliminating access to data within a writable storage media cartridge, the system comprising:
a processing circuit and logic integrated with and/or executable by the processing circuit, the logic being configured to:
determine that a first portion of data on the writable storage media cartridge is encrypted;
determine whether key shredding is enabled;
in response to determining that key shredding is not enabled, causing performance of a long erase on at least the encrypted first portion of data; and
causing shredding of an encryption key related to the encrypted first portion of data.
12. The system of claim 11 , wherein the logic is further configured to:
determine whether at least another portion of the writable storage media cartridge is not encrypted, and, in response, determine if a previous long erase has been completed on writable storage media of the writable storage media cartridge.
13. The system of claim 12 , wherein the logic is further configured to:
perform the long erase on the writable storage media of the writable storage media cartridge in response to determining that the previous long erase has not been completed on the writable storage media of the writable storage media cartridge.
14. The system of claim 13 , wherein the long erase is performed on the at least another portion of the writable storage media of the writable storage media cartridge.
15. The system of claim 13 , wherein the logic is further configured to update a database in response to performing the long erase.
16. The system of claim 11 , wherein the encryption key that is shredded is on the writable storage media cartridge.
17. The system of claim 11 , wherein the writable storage media cartridge is a tape cartridge, and wherein the tape cartridge comprises tape media and a cartridge memory.
18. The system of claim 17 , wherein the tape media comprises a non-user portion and the encryption key is stored on the non-user portion.
19. The system of claim 17 , wherein the encryption key is stored on the cartridge memory.
20. The system of claim 11 , wherein the shredding comprises overwriting the encryption key one or more times utilizing a data pattern that contains one of logical ones, zeroes, or some combination thereof.