NDCTL-REMOVE-PASSPHRASE(1) ndctl Manual NDCTL-REMOVE-PASSPHRASE(1) (NAME) ndctl-remove-passphrase - DIMM (SYNOPSIS) ndctl remove-passphrase [..] [] (DESCRIPTION) (keyring) NVDIMM . (blob) . key-ID keyring blob . (OPTIONS) nmemX dimm. dimm() . all --dimm . -b, --bus= (bus id) ( "ACPI.NFIT"). () . all --bus . -v, --verbose . -m, --master-passphrase (master passphrase) . (THEORY OF OPERATION) . . (Intel DSM) [1] : (enable passphrase) (update passphrase) DIMM (unlock DIMM) (disable security) (freeze security) (secure (crypto) erase) (overwrite) (master passphrase enable) (master passphrase update) (master passphrase secure erase). NVDIMM . (front end) ( [2]) (keyring) . keyutils API . (back end) ( DIMM ) DIMM . DSM libndctl ioctl DSM sysfs security dimm . key-ID security (user keyring) . master key () DIMM . master key DIMM DIMM . master key key-encryption-key (kek) . kek TPM ( ) System Master Key kek . kek . [2] . kek : # keyctl show Session Keyring 736023423 --alswrv 0 0 keyring: _ses 675104189 --alswrv 0 65534 \_ keyring: _uid.0 680187394 --alswrv 0 0 \_ trusted: nvdimm-master (regions) DIMM . overwrite regions dimm . [1] [2] ..SS " (UNLOCK)" DSM . initramfs (ndctl load-keys) libnvdimm modprobe . kek . probe libnvdimm : 1. DIMM 2. 3. kek 4. DSM (payload) DSM 5. DSM DIMM DIMM . (freeze) . (override) . (SETUP USER PASSPHRASE) DIMM kek . kek DIMM enc32 . (plaintext) . (userspace) . (/etc/ndctl/keys) . . (UPDATE USER PASSPHRASE) DSM . . kek kek . update-passphrase : 1. . 2. old. 3. "old". 4. kek. 5. DSM . 6. . (key-ID) sysfs . DSM keyring (blob) . (CRYPTO (SECURE) ERASE) remove-passphrase . WBINVD (CPU cache) . sanitize-dimm ndctl --crypto-erase . (OVERWRITE) --overwrite sanitize-dimm ndctl . NVDIMM . . : . ndctl wait-overwrite NVDIMM . WBINVD . --crypto-erase --overwrite crypto-erase . (SECURITY FREEZE) . (status query) () . (MASTER PASSPHRASE SETUP, UPDATE, and CRYPTO ERASE) . . (kek) . (COPYRIGHT) (C) 2016 - 2022 Intel Corporation. GPLv2: GPL . : . . (SEE ALSO) ndctl-setup-passphrase(1), ndctl-update-passphrase(1) ndctl 2026-06-30 NDCTL-REMOVE-PASSPHRASE(1)