NDCTL-SANITIZE-DIMM(1) ndctl Manual NDCTL-SANITIZE-DIMM(1) (NAME) ndctl-sanitize-dimm - NVDIMM() (SYNOPSIS) ndctl sanitize-dimm [..] [] (DESCRIPTION) sanitize-dimm NVDIMM . (info-blocks) (scramble) (namespace labels) . NVDIMM (raw) . NVDIMM (keyring) ndctl /etc/ndctl/keys . . crypto-erase overwrite NVDIMM . (OPTIONS) nmemX dimm. dimm() . all --dimm . -b, --bus= ( "ACPI.NFIT"). () . all --bus . -c, --crypto-erase NVDIMM . . (raw) . -o, --overwrite DIMM . (non-blocking) . NVDIMM (asynchronous) . . -m, --master-passphrase (master passphrase) . crypto-erase . -z, --zero-key (0) . --verbose . (THEORY OF OPERATION) (Intel DSM) . . [1] : DIMM () . NVDIMM . ( [2]) (keyring) . keyutils (API) . ( DIMM ) DIMM . DSM libndctl ioctl DSM sysfs security dimm . key-ID security . (master key) () DIMM . DIMM DIMM . key-encryption-key ( kek) . kek (TPM) kek . kek . [2] . kek : # keyctl show Session Keyring 736023423 --alswrv 0 0 keyring: _ses 675104189 --alswrv 0 65534 \_ keyring: _uid.0 680187394 --alswrv 0 0 \_ trusted: nvdimm-master (regions) DIMM . overwrite regions dimm . [1] [2] . (UNLOCK) DSM . initramfs (ndctl load-keys) libnvdimm modprobe . kek . (probe) libnvdimm : 1. DIMM 2. 3. kek 4. DSM DSM 5. DSM DIMM DIMM . . . (SETUP USER PASSPHRASE) DIMM kek . kek DIMM enc32 . . (blob) (/etc/ndctl/keys) . . (UPDATE USER PASSPHRASE) DSM . . kek kek . update-passphrase : 1. . 2. old. 3. "old". 4. kek. 5. DSM . 6. . (REMOVE USER PASSPHRASE) (key-ID) sysfs . DSM . (CRYPTO (SECURE) ERASE) remove-passphrase . WBINVD (cache) . sanitize-dimm ndctl --crypto-erase . (OVERWRITE) --overwrite ndctl sanitize-dimm . NVDIMM . . : . ndctl wait-overwrite NVDIMM . WBINVD . --crypto-erase --overwrite crypto-erase overwrite . (SECURITY FREEZE) . (status query) () . (MASTER PASSPHRASE SETUP, UPDATE, and CRYPTO ERASE) . . (kek) . (COPYRIGHT) (C) 2016 - 2022 (Intel Corporation). GPLv2: GPL . : . . (SEE ALSO) ndctl-wait-overwrite(1), ndctl 2026-06-30 NDCTL-SANITIZE-DIMM(1)