NDCTL-WAIT-OVERWRITE(1) ndctl Manual NDCTL-WAIT-OVERWRITE(1) (NAME) ndctl-wait-overwrite - (overwrite) (SYNOPSIS) ndctl wait-overwrite [..] [] (DESCRIPTION) sysfs POLL(2) ( security) (overwrite) . dimm . (OPTIONS) nmemX dimm. dimm() . all --dimm . -b, --bus= (bus) ( "ACPI.NFIT"). () . all --bus . -v, --verbose . (THEORY OF OPERATION) Intel Device Specific Methods (DSM) . . [1] : (enable passphrase) (update passphrase) DIMM (disable security) (freeze security) (secure crypto erase) (overwrite) (master passphrase enable) (master passphrase update) (master passphrase secure erase). NVDIMM . ( [2]) (keyring) . keyutils (API) . (payload) ( DIMM ) DIMM . DSM libndctl ioctl DSM sysfs security dimm . key-ID security (user keyring) . master key () DIMM . master key DIMM DIMM . master key key-encryption-key ( kek) . kek TPM (Trusted Platform Module) System Master Key kek . kek . [2] . kek : # keyctl show Session Keyring 736023423 --alswrv 0 0 keyring: _ses 675104189 --alswrv 0 65534 \_ keyring: _uid.0 680187394 --alswrv 0 0 \_ trusted: nvdimm-master (regions) DIMM . overwrite regions dimm . [1] [2] ..SS " (UNLOCK)" DSM . initramfs (ndctl load-keys) libnvdimm modprobe . kek . probe libnvdimm : 1. DIMM 2. 3. kek 4. DSM DSM 5. DSM DIMM DIMM . (freeze) . . (SETUP USER PASSPHRASE) DIMM kek . kek DIMM enc32 . (plaintext) . (binary blob) blob (/etc/ndctl/keys) . blob . (UPDATE USER PASSPHRASE) DSM . . kek kek . update-passphrase : 1. . 2. blob old. 3. blob "old". 4. kek. 5. DSM . 6. blob . key-ID sysfs . DSM keyring blob . [] (CRYPTO (SECURE) ERASE) remove-passphrase . WBINVD (stale CPU cache) . sanitize-dimm ndctl --crypto-erase . (OVERWRITE) --overwrite sanitize-dimm ndctl . NVDIMM . . : . ndctl wait-overwrite NVDIMM . WBINVD . --crypto-erase --overwrite crypto-erase overwrite . (SECURITY FREEZE) . (status query) . (MASTER PASSPHRASE SETUP, UPDATE, and CRYPTO ERASE) . . (kek) . (COPYRIGHT) (C) 2016 - 2022 Intel. GPLv2: GPL . : . . (SEE ALSO) ndctl-sanitize-dimm(1) ndctl 2026-06-30 NDCTL-WAIT-OVERWRITE(1)