Specifying File Deletion Options

EFT Server's HSM provides a data sanitation/data wiping option. If you do not activate the HSM, this feature is disabled after the 30-day trial expires.

You can configure EFT Server to securely delete or purge a file by writing over the initial data using encrypted and/or pseudorandom data. A menu of purging methods is available; available options depend on the library used.

• The 3-pass DoD method overwrites all addressable locations with a character and its complement, then a random character, and does this three times.

• The pseudorandom data wiping method does the following:

• 1. Initializes the wincrypt library

  2. Fills the file with randomly generated data from the wincrypt library

  3. Flushes the data to disk

  4. Deletes the file from file system calling the standard function DeleteFile()

You can specify which files EFT Server is to purge, including client-initiated delete commands, source files after successful OpenPGP encrypt operation, source file after move command across partition/drive, and others.

To specify a delete method

1. In the administration interface, connect to EFT Server and click the Server tab.

2. In the left pane, click the Site that you want to configure.

3. In the right pane, click the Security tab.

4. In the Data Security area, next to Secure data removal, click Configure. The Data Sanitation dialog box appears.

5. In the Delete method box, click the list to specify one of the following methods:

   • Windows standard (fastest)

   • Pseudorandom data (medium)

   • 3-pass DoD 5220.22-m (slow)

6. Click OK to close the dialog box.

7. Click Apply to save the changes on EFT Server.

8. A message appears when the purging mechanism is changed to anything other than the Windows standard delete method.

For further reference regarding data wiping, see the following articles:

(These links are outside of GlobalSCAPE's domain and could change.)

• Data remanence: http://en.wikipedia.org/wiki/Data_remanence,
  specifically the section titled "Standard Patterns for Purging": http://en.wikipedia.org/wiki/Data_remanence#Standard_patterns_for_purging

• US DoD 5220.22-M Standard, defined in the US National Industrial Security Program Operating Manual of the US Department of Defense: http://en.wikipedia.org/wiki/National_Industrial_Security_Program

• "Secure Deletion of Data from Magnetic and Solid-State Memory": http://www.usenix.org/publications/library/proceedings/sec96/full_papers/gutmann/