Skip to main content

Reports and erasure records

Every erase run of O&O SafeErase can produce a report. The report shows what was erased, with which method and with which result. Since version 22, a signed erasure record is stored with it. The record makes later changes to the report detectable.

Report​

The report contains the task, the start time and duration, the targets, the erase method actually used for each target, the overall result, and every warning or error. For whole disks, it can also contain the inventory number, the disposition and the protection requirement that you enter before the erasure, as well as the operator details from the settings.

Reports are saved as XML files. You open them under Reports; see Manage reports.

Erasure record​

The erasure record accompanies the report as a JSON file and a signed .oose file. Keep all files of a report together.

  • Signature: The O&O SafeErase service signs the record with a key of this installation. In Fortress Mode, and when the service is not available, a temporary key is used; the record says so. The settings show the fingerprint of the signing certificate. A company certificate can be used instead.
  • Timestamp: If enabled, a timestamp service confirms when the record was signed (RFC 3161). The service only receives a hash value, not the report. A record created offline can receive the timestamp later; it is then marked as added later.
  • Record chain: Each new record refers to the previous one. If a record is missing without a signed deletion note, the verification reports a gap in the chain.

What the signature proves​

A valid signature proves that the record has not been changed since it was signed. It does not prove that every target was erased: that is shown by the result in the report. Always check both, as described in Verify an erasure record.

Anonymized reports replace file and folder names with asterisks; see Settings.