Downloading a Certificate of Sanitization

After the Action Status of the following Wipe actions are updated to Completed, a Certificate of Sanitization is generated for each device that was successfully processed:

You can use this certificate to demonstrate to auditors that a device's data was successfully sanitized in compliance with NIST Special Publication 800-88, Revision 1, Guidelines for Media Sanitization.

Firmware Wipe certificate details

The Certificate of Sanitization for a Firmware Wipe contains the following information:

Device Information:
- Device Name
- Serial Number
- Manufacturer
- Model
Sanitization Information
- Item Disposition: [empty]
- Conducted By: user that submitted the Wipe request
- Date and Time Started: date and time the action started on the device, presented in the user profile time zone of the user that downloaded the certificate
Disk Information
- Model: N/A
- Serial Number: N/A
- Drive
- Sanitization Method: one of the following:
  - Purge - TCG OPAL Revert to Factory Default
  - Purge - Erase NVMe Cryptographic Keys
  - Purge - Erase all NVMe User Space

Cryptographic Wipe certificate details

The Certificate of Sanitization for a Cryptographic Wipe contains the following information:

Device Information:
- Device Name
- Serial Number
- Manufacturer
- Model
Sanitization Information
- Item Disposition: Purge
- Conducted By: user that submitted the Wipe request
- Date and Time Started: date and time the action started on the device, presented in the user profile time zone of the user that downloaded the certificate
Disk Information
- Model
- Serial Number
- Drive (letter)
- Sanitization Method: Cryptographic erase

A Certificate of Sanitization is not generated when the Don't wipe unencrypted free space option is enabled in a Cryptographic Wipe request. Learn more

Delete All Files certificate details

The Certificate of Sanitization for a Delete All Files wipe contains the following information:

Device Information:
- Device Name
- Serial Number
- Manufacturer
- Model
Sanitization Information
- Item Disposition: Clear
- Conducted By: user that submitted the Wipe request
- Date and Time Started: date and time the action started on the device, presented in the user profile time zone of the user that downloaded the certificate
- Action: possible values are:
  - Delete all user files
  - Delete all user files and disable OS
Sanitization Method: possible values are:
- Overwrite 1 time(s)
- Overwrite 7 time(s)
Log file name

A device's Certificate of Sanitization is available for download for up to five years from the Wipe action's completion date.

To download a device's Certificate of Sanitization:

Log in to the Secure Endpoint Console as a user with the View permission for Wipe Device.
Do one of the following:
Download the certificate from the device's Device Details > History page
1. Open the device's History page.
2. Change the date range, if applicable.
3. Click to show only action events in the timeline.
4. [Optional] Use the Search field to search for the event.
5. Click the event you want to view. The event's overview opens to the right of the timeline.
6. Under Certificate, click Download and download the PDF file to your local machine.
If a certificate is not available for download, the request may still be in progress, or it may have failed for the reason stated under Failure reason.
Download the certificate from the device's Device Details > Actions page
1. Open the device's Actions page.
2. Click the Type filter and select Wipe.
3. Do one of the following:
  - In the Output column, click Certificate and download the PDF file to your local machine.
  - Click the background of the applicable action to open the request details overview. Beside Result, click Certificate and download the PDF file to your local machine.
If a certificate is not available for download, refer to the Action > Status and Action > Status details columns. The request may still be in progress, or it may have failed for the reason stated in the Action > Status details column.
Download the certificate from the Action Requests page
1. On the navigation bar, click History > Action Requests.
2. On the Action Requests sidebar, click the applicable request to open it in the work area. To find the specific request, do one or more of the following:
  - Click the Type filter and select Wipe.
  - Select an option from the Created drop-down to filter by the date the requests were created. Options vary from Past 7 days to Past 90 days.
    
    When the Created drop-down is used to filter the list of requests, actions in Done are filtered by the date the device action requests were created, not by the date they were completed.
  - Click to expand the Search field and enter one of the following:
    
    The request name
    
    The last name of the requester
    
    The search results update dynamically as you type. To clear the Search field, click .
  If multiple devices were included in the request, each device shows in the grid.
3. Find the applicable device. You can search for the device, or add filters to narrow the list of devices. For example, you can add the Action status is Completed filter to show only those requests that are finished processing.
4. In the Output column for the applicable device, click Certificate and download the PDF file to your local machine.
If a certificate is not available for download, refer to the Action > Status and Action > Status details columns. The request may still be in progress, or it may have failed for the reason stated in the Action > Status details column.
Download the certificate from the Actions page
1. On the navigation bar, click History > Actions.
2. Find the applicable action by updating the predefined filters or adding additional filters. For example, select Cryptographic Wipe or Delete File in the Type filter.
3. Do one of the following:
  - In the Output column, click Certificate and download the PDF file to your local machine.
  - Click the background of the applicable action to open the request details overview. Beside Result, click Certificateand download the PDF file to your local machine.
If a certificate is not available for download, refer to the Action > Status and Action > Status details columns. The request may still be in progress, or it may have failed for the reason stated in the Action > Status details column.