Top
Author
Updated
7 Nov 2023Form Number
LP1591PDF size
27 pages, 258 KBSubscribed to LP1591.
Thank you for your feedback.
Table of Contents
Abstract
The ThinkSystem 7450 MAX Mixed Use NVMe SSDs are advanced data center SSDs optimized for mixed read-write performance, endurance, and strong data protection for Lenovo servers. With a PCIe 4.0 x4 interface, they are designed for greater performance and endurance in a cost-effective design, and to support a broader set of workloads. Now with SED encryption as standard, these drives help ensure data security, even when the drive is removed from the server.
This product guide provides essential presales information to understand the ThinkSystem 7450 MAX Mixed Use NVMe SSDs offerings and their key features, specifications, and compatibility. This guide is intended for technical specialists, sales specialists, sales engineers, IT architects, and other IT professionals who want to learn more about the 7450 MAX SSDs and consider their use in IT solutions.
Change History
Changes in the November 7, 2023 update:
- Added the following 7mm drive
- ThinkSystem 7mm U.3 7450 MAX 800GB Mixed Use NVMe PCIe 4.0 x4 HS SSD, 4XB7A82851
Introduction
The ThinkSystem 7450 MAX Mixed Use NVMe SSDs are advanced data center SSDs optimized for mixed read-write performance, endurance, and strong data protection for Lenovo servers. With a PCIe 4.0 x4 interface, they are designed for greater performance and endurance in a cost-effective design, and to support a broader set of workloads. Now with SED encryption as standard, these drives help ensure data security, even when the drive is removed from the server.
SED support: All drives listed in this product guide include SED drive encryption. Our naming convention for new drives doesn’t include SED in the name.
Did you know?
Lenovo Mixed Used SSDs like the 7450 MAX SSDs are suitable for mixed read-write and general-purpose data center workloads, however their NVMe PCIe interface means the drives also offer high performance. Overall, these SSDs provide outstanding IOPS/watt and cost/IOPS for enterprise solutions.
Self-encrypting drives (SEDs) provide benefits by encrypting data on-the-fly at the drive level with no performance impact, by providing instant secure erasure thereby making the data no longer readable, and by enabling auto-locking to secure active data if a drive is misplaced or stolen from a system while in use. These features are essential for many businesses, especially those storing customer data.
Part number information
The following table lists the part numbers and feature codes for the 7450 MAX SSDs.
The part numbers include the following items:
- One solid-state drive
- Hot swap drives include a hot-swap tray
- Documentation flyer
Features
Non-Volatile Memory Express (NVMe) is PCIe high performance SSD technology that provides high I/O throughput and low latency. NVMe interfaces remove SAS/SATA bottlenecks and unleash all of the capabilities of contemporary NAND flash memory. Each NVMe PCI SSD has direct PCIe x4 connection, which provides at least 2x more bandwidth and 2x less latency than SATA/SAS-based SSD solutions. NVMe drives are also optimized for heavy multi-threaded workloads by using internal parallelism and many other improvements, such as enlarged I/O queues.
The ThinkSystem 7450 MAX Mixed Use NVMe SSDs have the following features:
- NVMe SSD with PCIe 4.0 performance and a U.3 interface
- Based on the Micron 7450 MAX family of SSDs
- Compliant with Trusted Computing Group Opal 2.01 Security Subsystem Class cryptographic standard (TCG Opal 2.01 SSC)
- Multiple form factors available:
- 2.5-inch hot-swap drive tray
- M.2 drives
- Micron 176-layer 3D TLC NAND
- Direct PCIe 4.0 x4 connection for each NVMe drive, resulting in up to 8 GBps overall throughput.
- Advanced ECC Engine and End-to-End Data Protection
- Protect data integrity from unexpected power loss with advanced power-loss protection architecture
- Adaptive Thermal Monitoring to monitor the internal temperature of the drive with power adjustment to ensure operation within thermal limits
- Supports Self-Monitoring, Analysis and Reporting Technology (S.M.A.R.T).
- Enterprise-level security features:
- Secure Execution Environment - dedicated security processing hardware with physical isolation
- Asymmetric Roots of Trust - Enables authenticated revocation of root keys
- Strong Asymmetric Key Support - Uses standard, NIST-approved algorithms with 208-bit/3072-bit RSA keys
- RSA Delegation Key Support - Enables customers to maintain ownership of RSA keys
- Secure Boot - Helps ensure firmware integrity on running platform
- Key-Based Firmware Update - Validates firmware using public key-based authentication prior to firmware update
- Key-Based Privileged Access - Protects against unauthorized privileged SSD function execution with public key-based authorization
The key metric for solid state drives is their endurance (life expectancy). SSDs have a huge, but finite, number of program/erase (P/E) cycles, which determines how long the drives can perform write operations and thus their life expectancy. Write Intensive SSDs have better endurance than Mixed Use SSDs, which in turn have better endurance than Read Intensive SSDs.
SSD write endurance is typically measured by the number of program/erase cycles that the drive can incur over its lifetime, which is listed as TBW in the device specification. The TBW value that is assigned to a solid-state device is the total bytes of written data that a drive can be guaranteed to complete. Reaching this limit does not cause the drive to immediately fail; the TBW simply denotes the maximum number of writes that can be guaranteed.
A solid-state device does not fail upon reaching the specified TBW, but at some point after surpassing the TBW value (and based on manufacturing variance margins), the drive reaches the end-of-life point, at which time the drive goes into read-only mode. Because of such behavior, careful planning must be done to use SSDs in the application environments to ensure that the TBW of the drive is not exceeded before the required life expectancy.
For example, the 7450 MAX 1.6 TB drive has an endurance of 8,700 TB of total bytes written (TBW). This means that for full operation over five years, write workload must be limited to no more than 4,767 GB of writes per day, which is equivalent to 3.0 full drive writes per day (DWPD). For the device to last three years, the drive write workload must be limited to no more than 7,945 GB of writes per day, which is equivalent to 5.0 full drive writes per day.
The benefits of drive encryption
All ThinkSystem 7450 MAX Mixed Use NVMe SSDs support drive encryption.
Self-encrypting drives (SEDs) provide benefits in three main ways:
- By encrypting data on-the-fly at the drive level with no performance impact
- By providing instant secure erasure (cryptographic erasure, thereby making the data no longer readable)
- By enabling auto-locking to secure active data if a drive is misplaced or stolen from a system while in use
The following sections describe the benefits in more details.
Automatic encryption
It is vital that a company keep its data secure. With the threat of data loss due to physical theft or improper inventory practices, it is important that the data be encrypted. However, challenges with performance, scalability, and complexity have led IT departments to push back against security policies that require the use of encryption. In addition, encryption has been viewed as risky by those unfamiliar with key management, a process for ensuring a company can always decrypt its own data. Self-encrypting drives comprehensively resolve these issues, making encryption both easy and affordable.
When the self-encrypting drive is in normal use, its owner need not maintain authentication keys (otherwise known as credentials or passwords) in order to access the data on the drive. The self-encrypting drive will encrypt data being written to the drive and decrypt data being read from it, all without requiring an authentication key from the owner.
Drive retirement and disposal
When hard drives are retired and moved outside the physically protected data center into the hands of others, the data on those drives is put at significant risk. IT departments retire drives for a variety of reasons, including:
- Returning drives for warranty, repair, or expired lease agreements
- Removal and disposal of drives
- Repurposing drives for other storage duties
Nearly all drives eventually leave the data center and their owner's control. Corporate data resides on such drives, and when most leave the data center, the data they contain is still readable. Even data that has been striped across many drives in a RAID array is vulnerable to data theft because just a typical single stripe in today’s high-capacity arrays is large enough to expose for example, hundreds of names and bank account numbers.
In an effort to avoid data breaches and the ensuing customer notifications required by data privacy laws, companies use different methods to erase the data on retired drives before they leave the premises and potentially fall into the wrong hands. Current retirement practices that are designed to make data unreadable rely on significant human involvement in the process, and are thus subject to both technical and human failure.
The drawbacks of today’s drive retirement practices include the following:
- Overwriting drive data is expensive, tying up valuable system resources for days. No notification of completion is generated by the drive, and overwriting won’t cover reallocated sectors, leaving that data exposed.
- Methods that include degaussing or physically shredding a drive are expensive. It is difficult to ensure the degauss strength is optimized for the drive type, potentially leaving readable data on the drive. Physically shredding the drive is environmentally hazardous, and neither practice allows the drive to be returned for warranty or expired lease.
- Some companies have concluded the only way to securely retire drives is to keep them in their control, storing them indefinitely in warehouses. But this is not truly secure because a large volume of drives coupled with human involvement inevitably leads to some drives being lost or stolen.
- Professional disposal services is an expensive option and includes the cost of reconciling the services as well as internal reports and auditing. Transporting of the drives also has the potential of putting the data at risk.
Self-encrypting drives eliminate the need to overwrite, destroy, or store retired drives. When the drive is to be retired, it can be cryptographically erased, a process that is nearly instantaneous regardless of the capacity of the drive.
Instant secure erase
The self-encrypting drive provides instant data encryption key destruction via cryptographic erasure. When it is time to retire or repurpose the drive, the owner sends a command to the drive to perform a cryptographic erasure. Cryptographic erasure simply replaces the encryption key inside the encrypted drive, making it impossible to ever decrypt the data encrypted with the deleted key.
Self-encrypting drives reduce IT operating expenses by reducing asset control challenges and disposal costs. Data security with self-encrypting drives helps ensure compliance with privacy regulations without hindering IT efficiency. So called "Safe Harbor" clauses in government regulations allow companies to not have to notify customers of occurrences of data theft if that data was encrypted and therefore unreadable.
Furthermore, self-encrypting drives simplify decommissioning and preserve hardware value for returns and repurposing by:
- Eliminating the need to overwrite or destroy the drive
- Securing warranty returns and expired lease returns
- Enabling drives to be repurposed securely
Auto-locking
Insider theft or misplacement is a growing concern for businesses of all sizes; in addition, managers of branch offices and small businesses without strong physical security face greater vulnerability to external theft. Self-encrypting drives include a feature called auto-lock mode to help secure active data against theft.
Using a self-encrypting drive when auto-lock mode is enabled simply requires securing the drive with an authentication key. When secured in this manner, the drive’s data encryption key is locked whenever the drive is powered down. In other words, the moment the self-encrypting drive is switched off or unplugged, it automatically locks down the drive’s data.
When the self-encrypting drive is then powered back on, it requires authentication before being able to unlock its encryption key and read any data on the drive, thus protecting against misplacement and theft.
While using self-encrypting drives just for the instant secure erase is an extremely efficient and effective means to help securely retire a drive, using self-encrypting drives in auto-lock mode provides even more advantages. From the moment the drive or system is removed from the data center (with or without authorization), the drive is locked. No advance thought or action is required from the data center administrator to protect the data. This helps prevent a breach should the drive be mishandled and helps secure the data against the threat of insider or outside theft.
Technical specifications
The following tables present technical specifications for the ThinkSystem 7450 MAX Mixed Use NVMe SSDs.
Server support
The following tables list the ThinkSystem servers that are compatible.
Storage controller support
NVMe PCIe SSDs require a NVMe drive backplane and some form of PCIe connection to processors. PCIe connections can take the form of either an adapter (PCIe Interposer or PCIe extender) or simply a cable that connects to an onboard NVMe connector.
Consult the relevant server product guide for details about required components for NVMe drive support.
Operating system support
The following tables list the supported operating systems:
- ThinkSystem 2.5" U.3 7450 MAX 1.6TB Mixed Use NVMe PCIe 4.0 x4 HS SSD, 4XB7A13967
- ThinkSystem M.2 7450 MAX 800GB Mixed Use NVMe PCIe 4.0 x4 NHS SSD (with Heatsink), 4XB7A82676
Tip: These tables are automatically generated based on data from Lenovo ServerProven.
VMware vSAN certification: The drives listed in this product guide are VMware vSAN certified, however in the VMware Compatibility Guide (VCG), they are listed under the drive vendor company name instead of Lenovo. To check a drive for vSAN certification, search the VCG using the Supplier part number as listed in Table 1 in the Part number information section.
1 For limitation, please refer Support Tip TT1154
2 For limitation, please refer Support Tip TT1154, Support Tip 104278
1 The OS is not supported with EPYC 7003 processors.
2 ISG will not sell/preload this OS, but compatibility and cert only.
IBM SKLM Key Management support
To effectively manage a large deployment of SEDs in Lenovo servers, IBM Security Key Lifecycle Manager (SKLM) offers a centralized key management solution. Certain Lenovo servers support Features on Demand (FoD) license upgrades that enable SKLM support.
The following table lists the part numbers and feature codes to enable SKLM support in the management processor of the server.
The IBM Security Key Lifecycle Manager software is available from Lenovo using the ordering information listed in the following table.
The following tables list the ThinkSystem servers that are compatible.
Warranty
The 7450 MAX SSDs carry a one-year, customer-replaceable unit (CRU) limited warranty. When the SSDs are installed in a supported server, these drives assume the system’s base warranty and any warranty upgrades.
Solid State Memory cells have an intrinsic, finite number of program/erase cycles that each cell can incur. As a result, each solid state device has a maximum amount of program/erase cycles to which it can be subjected. The warranty for Lenovo solid state drives (SSDs) is limited to drives that have not reached the maximum guaranteed number of program/erase cycles, as documented in the Official Published Specifications for the SSD product. A drive that reaches this limit may fail to operate according to its Specifications.
Physical specifications
The 7450 MAX SSDs have the following physical specifications:
Dimensions and weight (approximate, without the drive tray):
- Height:
- Capacities 3.2 TB and below: 7 mm (0.3 in.)
- Capacities 6.4 TB and above: 15 mm (0.6 in.)
- Width: 70 mm (2.8 in.)
- Depth: 100 mm (4.0 in.)
- Weight: 70 g (2.5 oz)
Operating environment
The 7450 MAX SSDs are supported in the following environment:
- Temperature:
- Operating: 0 to 70 °C (32 to 158 °F)
- Non-operating: -40 to 85 °C (-40 to 185 °F)
- Relative humidity, Non-operating: 5 to 95% (noncondensing)
- Maximum altitude: 3,050 m (10,000 ft)
- Shock, non-operating: 1,500 G (Max) at 0.5 ms
- Vibration, non-operating: 20 GRMS (5-3000 Hz)
Agency approvals
The 7450 MAX SSDs conform to the following regulations:
- CE (Europe): EN55032, EN55024 Class B, RoHS
- FCC: CFR Title 47, Part 15, Class B
- UL/cUL: approval to UL-60950-1, 2nd Edition, IEC 60950-1:2005 (2nd Edition); EN 60950-1 (2006) + A11:2009+ A1:2010 + A12:2011 + A2:2013
- BSMI (Taiwan): approval to CNS 13438, Class B, CNS 15663
- RCM (Australia, New Zealand): AS/NZS CISPR32 Class B
- KC RRL (Korea): approval to KN32 Class B, KN 35 Class B
- W.E.E.E.: Compliance with EU WEEE directive 2012/19/EC.
- TUV (Germany): approval to IEC60950/EN60950
- VCCI (Japan): 2015-04 Class B
- IC (Canada): ICES-003 Class B
- Morocco: EN55032, EN55024 Class B
- UkrSEPRO (Ukraine): EN55032 Class B, IEC60950/EN60950, RoHS (Resolution 2017 No. 139)
- UKCA (UK): SI 2016/1091 Class B and SI 2012/3032 RoHS
Related publications and links
For more information, see the following documents:
-
Lenovo ThinkSystem storage options product web page
https://lenovopress.com/lp0761-storage-options-for-thinksystem-servers - Micron 7450 product page
https://www.micron.com/products/ssd/product-lines/7450
Trademarks
Lenovo and the Lenovo logo are trademarks or registered trademarks of Lenovo in the United States, other countries, or both. A current list of Lenovo trademarks is available on the Web at https://www.lenovo.com/us/en/legal/copytrade/.
The following terms are trademarks of Lenovo in the United States, other countries, or both:
Lenovo®
ServerProven®
System x®
ThinkSystem®
The following terms are trademarks of other companies:
AMD is a trademark of Advanced Micro Devices, Inc.
Intel® and Xeon® are trademarks of Intel Corporation or its subsidiaries.
Linux® is the trademark of Linus Torvalds in the U.S. and other countries.
Microsoft®, Windows Server®, and Windows® are trademarks of Microsoft Corporation in the United States, other countries, or both.
Other company, product, or service names may be trademarks or service marks of others.
Configure and Buy
Please select a locale
Full Change History
Changes in the November 7, 2023 update:
- Added the following 7mm drive
- ThinkSystem 7mm U.3 7450 MAX 800GB Mixed Use NVMe PCIe 4.0 x4 HS SSD, 4XB7A82851
Changes in the April 12, 2023 update:
- Added a note about VMware vSAN certification - Operating system support section
Changes in the November 22, 2022 update:
- New M.2 drive option - Part number information section
- ThinkSystem M.2 7450 MAX 800GB Mixed Use NVMe PCIe 4.0 x4 NHS SSD, 4XB7A84603
Changes in the August 23, 2022 update:
- New 2.5-inch hot-swap drive options
- ThinkSystem 2.5" U.3 7450 MAX 6.4TB Mixed Use NVMe PCIe 4.0 x4 HS SSD, 4XB7A13971
- ThinkSystem 2.5" U.3 7450 MAX 12.8TB Mixed Use NVMe PCIe 4.0 x4 HS SSD, 4XB7A84056
Changes in the June 10, 2022 update:
- Added the OS compatibility matrix for the drives - Operating system support section
First published: May 24, 2022
Course Detail
Employees Only Content
The content in this document with a is only visible to employees who are logged in. Logon using your Lenovo ITcode and password via Lenovo single-signon (SSO).
The author of the document has determined that this content is classified as Lenovo Internal and should not be normally be made available to people who are not employees or contractors. This includes partners, customers, and competitors. The reasons may vary and you should reach out to the authors of the document for clarification, if needed. Be cautious about sharing this content with others as it may contain sensitive information.
Any visitor to the Lenovo Press web site who is not logged on will not be able to see this employee-only content. This content is excluded from search engine indexes and will not appear in any search results.
For all users, including logged-in employees, this employee-only content does not appear in the PDF version of this document.
This functionality is cookie based. The web site will normally remember your login state between browser sessions, however, if you clear cookies at the end of a session or work in an Incognito/Private browser window, then you will need to log in each time.
If you have any questions about this feature of the Lenovo Press web, please email David Watts at dwatts@lenovo.com.
