CSDSR Customer FAQs

Customer FAQs

Collapse All Expand All
 Can I lower the classification level of my printer, computer, switch, or other hardware? 

Typically no, but you can contact your local security office for specific guidance.  

 Can I repair my EPL-approved equipment? 

Please contact the manufacturer/vendor and ensure that the repair brings the device back to an "as stock" configuration.  Any alterations may invalidate the machine's approval. DoD 5200.01 V3 provides a little more information about this. 

 Do I have to destroy my storage device? Can't I reuse it?

Unfortunately, you do have to destroy your drives. CSDSR has not approved any software erasure methods. Physical destruction is the only secure way to ensure your data is gone. For devices such as routers, switches, etc., contact your local security office. 

 How can I determine if a degausser on the EPL is working as intended?
CSDSR recommends using a properly calibrated field verification device found in the Magnetic Degaussers EPL to determine your degausser's field strength and effectiveness.  Using such a device should not replace routine maintenance procedures outlined by your degausser manufacturer; it is simply a supplemental verification method.
 How do I dispose of my storage destruction machine once it reaches its end of use?  

Thoroughly inspect the machine for storage device particulate that may not have been disposed of. Ensure that you perform a thorough search, Once complete, you may dispose of in any manner you like. We recommend you recycle.   

 How do I dispose of my storage device once I've properly destroyed it?   

We recommend you recycle, but you are free to dispose of your non-classified debris in any manner. 

 How often are new EPLs published? 

EPLS are expected to be published every quarter but may be subjected to delays. 

 I degaussed my hard drive, do I still need to destroy it? 

Yes, physically destroying a hard drive is an additional level of security and helps ensure that this drive is not accidentally mistaken for a working drive. Note: Destruction does not replace degassing. You MUST degauss your hard drive.  

 I don't have access to any of the equipment on the EPLs. Is there anywhere I can send my storage media? 

Yes! If you're an eligible entity, the NSA Classified Material Conversion (CMC) office may be able to help you. Please contact them at (301) 688-6672 or visit their website for more information. If you are not eligible for their assistance, we recommend you purchase a unit on our EPL or find a service in your area to destroy your information for you; verify that any service you utilize complies with our EPL. 

 I have a printer, router, computer, switch, or other pieces of equipment. How do I sanitize that? 

Please contact the manufacturer and request a "statement of volatility." Follow the instructions contained within and remove all non-volatile storage and disintegrate. If you cannot remove nonvolatile memory, then you must disintegrate the board.  Ensure volatile memory is sanitized by disconnecting the power for at least 24 hours. Contact your local security office for guidance and procedures.  

 I have a shredder, or other devices, in my office that isn't on the EPL. Can you add it? 

Potentially, but not instantly. The vendor of the device must initiate a request to have their device evaluated and CSDSR would need to perform a full examination of the device before we could make a determination. 

 I've had a data spill. What should I do with the affected hardware?

Report the spill to your local security office and follow your organization's protocol. CSDSR requires the hardware to be destroyed in accordance with our EPLs. 

 Is there an approved vendor that can come on-site to destroy my media?
CSDSR does not approve nor authorize vendors for destruction, only equipment found on the Evaluated Products Lists are approved for destruction. It is up to the local security official to select and vet service providers. All service providers must be using NSA/CSS approved equipment for destruction of classified materials.
 My product was removed from the EPL, can I still use it? 

DoD 5200.01 V3 allows for a six-year window for you to use this product until you replace it. The expiration for this six-year period will be listed in the EPL.  CSDSR does recommend you replace your device as soon as you can. 

 What about cell phones, iPads, and tablets? 

Batteries need to be removed. Batteries can explode if shredded. If possible, LCD screens should also be removed.  Disintegrate these devices utilizing a product on our SSD Disintegrator EPL. 

 What classification can x device destroy? 

All approved products on the EPL are capable of sanitizing TS/SCI material and below.  Any device not listed within the EPLs is not approved for DoD usage for material at any classified level.  

 What is the difference between HAMR vs Non-HAMR drives?
Hard disk drives, after 2020, have a possibility of being HAMR Drives. Manufacturers of these drives are required to place notices on the packaging with United States having the notices of: "Complies with FDA performance standards for laser products except or conformance with IEC 60825-1 Ed. 3., as described in Laser Notice No. 56, dated May 8, 2019" or "Complies with 21 CFR 1040.10 and 1040.11 except for conformance with IEC 60825-1 Ed. 3., as described in Laser Notice No. 56, dated May 8, 2019." Within the European Union, the notice of the HAMR drive will have the notice: "Class 1 consumer laser product EN 50689:2021".
 What should I do with a HAMR Drive or MAMR Drive? 

These drives are still in development and aren't publicly available.  If you do have a HAMR drive or MAMR drive, you'll need to incinerate the drive to ash. No other method currently exists capable of securely sanitizing this data. 

Vendor FAQs

Collapse All Expand All
 Can my product be approved for multiple types of media? 

Yes, but CSDSR must test your device against the requirements set for all types of media your device "destroys". If a product is tested for multiple devices and fails some of those devices, the device will not be approved or listed for those devices. The product will be approved for only the devices it sanitized to NSA specifications. 

 Does the CSDSR evaluate magnetic degaussers?

Yes, due to advances in hard disk drive technology NSA will no longer accept degaussers for evaluation with magnetic fields less than 30000 Gauss.  

 What is the evaluation procedure? 

Submit/email product evaluation request to NSA CSDSR with product documentation. If NSA determines that an evaluation is worthwhile/warranted, CSDSR will submit for an MOA to be created for the vendor and the process will be started to have the equipment shipped to CSDSR. Once the equipment is received CSDSR strives to have an 18-week turnaround time.