Selling servers without transferring data or access
- Reading time
- 3 minutes
- Last reviewed
On this page
Selling a server means deciding exactly which hardware leaves, which information remains with the business and which access must end. Treat the chassis, installed storage and management configuration as linked records. A clean operating-system screen does not establish that every relevant storage location has been addressed.
Start with the IT owner. The release decision depends on the server's configuration, the information it has held and the business's retention requirements. It also depends on whether the hardware can be sold under its ownership and support arrangements.
Build the pack around the physical server
Use the chassis serial as the main reference, then identify the components and work records beneath it.
| Record | What it should establish |
|---|---|
| Chassis identity | Manufacturer, model, serial, location and offered configuration |
| Storage inventory | Installed drives or other media, their identifiers and intended retain, remove or sanitise decision |
| Data-handling evidence | Authorised process, applicable devices or media, outcome, date and unresolved exceptions |
| Management release | Review of management-controller settings, credentials, remote access and relevant account relationships |
| Licence and support position | Rights included, rights excluded and any provider confirmation needed |
| Physical sale specification | Remaining processors, memory, storage, controllers, power supplies, rails and other accessories |
| Final reconciliation | What actually leaves against what the release pack approves |
The ICO asset-management guidance supports identifying information-bearing assets and controlling disposal. Keep sensitive work evidence in the internal pack. Publish only the hardware specification and appropriate statements about preparation.
Why drive removal is only one part of the review
A server can contain settings or storage beyond its main operating-system drive. The relevant locations depend on the model and installed components.
For example, Dell's iDRAC9 system and user-data guidance describes separate categories involving system configuration, management-controller information, supported drives and other storage. It also documents limits and exceptions. Those distinctions matter when specifying the work.
This is not an instruction to run a particular erase function. Ask the authorised IT specialist to identify the applicable manufacturer documentation, define the intended outcome and confirm which components the work covers. A record that says "server wiped" should be expanded if its scope is unclear.
Keep any retained drives under the business's information-handling controls. Removing a drive from the server does not dispose of its data.
Update the offer after technical preparation
Consider a fictional server with eight drive bays. Six drives are retained, two bays were already empty, and the chassis is offered without drives. The sale description should say that directly. An old asset register entry for the former storage capacity is no longer an accurate offer.
Photograph the current configuration and list caddies, blanking plates and rails individually where relevant. Missing proprietary components can affect a buyer's intended use. Do not promise compatibility with the buyer's existing rack or systems without the necessary specifications.
Distinguish observed startup behaviour from a full hardware assessment. State dated tests and their limits. Avoid calling storage capacity available if no drives are included.
Make release a controlled handover
Keep unresolved servers separate from approved stock. Before collection, match the chassis serial, included components and any detached accessories to the pack. Record substitutions or withdrawals before changing the lot.
Use the computer inventory guide for other desktop assets, network equipment release checks for routers and switches, and confidential-clearance planning for associated media and records.
Give UK Auction Group the approved hardware schedule and readiness date. Keep account credentials, configuration exports and detailed data records within the authorised business process.
Sources
This guide gives general information. Equipment-specific, legal, tax and safety decisions may need a qualified adviser or competent specialist. The guides do not promise sale prices, fees or results.