Bottom line: Check whether the spare has already entered the data VDEV before planning the next disk action. Treat promotion of that active spare and restoration of the spare reserve as separate steps with separately checked device identities.
\nThe TrueNAS replacement guide says an available hot spare is automatically inserted into a data VDEV when an active drive fails, followed by a resilver. Its hot-spare procedure takes the failed disk offline, detaches that failed disk to promote the spare, then recreates the spare VDEV. The guide warns that using its ordinary replacement branch after a spare has entered the pool causes two resilvers and recommends promotion followed by recreating the reserve instead. A replacement disk must have at least the failed disk’s capacity, and the replacement process wipes its data.
\nThese are the versioned TrueNAS procedures, not a diagnosis of the present pool or a compatibility statement for a drive. DSE leaves the actual hardware choice and any unsafe or unclear device state to the responsible storage owner and applicable manufacturer guidance.
\nThe following steps are DSE recommendations based on the cited source.
\nDSE recommends a before-action pool diagram showing the failed device, active replacement or spare, and remaining reserve. Have a second person check the physical-to-logical device mapping before removal. Write the selected branch beside the diagram so an operator does not begin the no-spare procedure merely because that is the first replacement sequence in the guide.
\nFor a proposed case with an already activated spare, walk through promotion and recreation of the reserve as two different decisions. Identify which failed member would be detached and which new disk would become the spare. Keep the new disk’s identity, capacity and disposition of any existing contents explicit. Pause if the displayed state differs from the reviewed diagram.
\nPlan the service observation around the actual reconstruction state and the owner’s workload constraints. Keep any force option outside the ordinary plan until its purpose and destructive consequence have been separately reviewed. Do not close the incident on a completed physical swap alone; require the resulting member and reserve assignments to be reconciled with the intended pool design.
\nHave the final diagram show the promoted data member and newly assigned reserve as distinct identities. Require the reviewer to locate both in the actual status evidence. A familiar enclosure slot or reused disk description should not replace that identity check.
\nProposed verification: rehearse the selected branch only on a disposable pool or under an appropriately approved storage procedure. Record the initial active-spare state, exact targeted device and resulting member assignment. Observe reconstruction through its actual completion and preserve the reported health information rather than assuming a predetermined duration.
\nCheck the recreated spare VDEV separately and compare all final identities with the diagram. Have the storage owner review remaining errors, workload observations and reserve capacity before accepting the result. Retain before-and-after pool records and the second-person device check. Escalate an unexplained state instead of repeating a destructive action to obtain the expected screen.
\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change.
\n", "content_text": "Bottom line: Check whether the spare has already entered the data VDEV before planning the next disk action. Treat promotion of that active spare and restoration of the spare reserve as separate steps with separately checked device identities.\nSource fact: what the authority says\nThe TrueNAS replacement guide says an available hot spare is automatically inserted into a data VDEV when an active drive fails, followed by a resilver. Its hot-spare procedure takes the failed disk offline, detaches that failed disk to promote the spare, then recreates the spare VDEV. The guide warns that using its ordinary replacement branch after a spare has entered the pool causes two resilvers and recommends promotion followed by recreating the reserve instead. A replacement disk must have at least the failed disk’s capacity, and the replacement process wipes its data.\nWhat the source does not establish\nThese are the versioned TrueNAS procedures, not a diagnosis of the present pool or a compatibility statement for a drive. DSE leaves the actual hardware choice and any unsafe or unclear device state to the responsible storage owner and applicable manufacturer guidance.\nApplicability questions\n\nWhich physical disk failed, and what evidence maps that identity to the displayed VDEV member?\nIs a spare already active, and what reconstruction activity remains in progress?\nWhich documented branch matches that observed state?\nWhat approved disk will restore the spare reserve, and is any existing data on it authorized for destruction?\n\nDSE recommendation: controlled next steps\nThe following steps are DSE recommendations based on the cited source.\nDSE recommends a before-action pool diagram showing the failed device, active replacement or spare, and remaining reserve. Have a second person check the physical-to-logical device mapping before removal. Write the selected branch beside the diagram so an operator does not begin the no-spare procedure merely because that is the first replacement sequence in the guide.\nFor a proposed case with an already activated spare, walk through promotion and recreation of the reserve as two different decisions. Identify which failed member would be detached and which new disk would become the spare. Keep the new disk’s identity, capacity and disposition of any existing contents explicit. Pause if the displayed state differs from the reviewed diagram.\nPlan the service observation around the actual reconstruction state and the owner’s workload constraints. Keep any force option outside the ordinary plan until its purpose and destructive consequence have been separately reviewed. Do not close the incident on a completed physical swap alone; require the resulting member and reserve assignments to be reconciled with the intended pool design.\nHave the final diagram show the promoted data member and newly assigned reserve as distinct identities. Require the reviewer to locate both in the actual status evidence. A familiar enclosure slot or reused disk description should not replace that identity check.\nVerification and evidence\nProposed verification: rehearse the selected branch only on a disposable pool or under an appropriately approved storage procedure. Record the initial active-spare state, exact targeted device and resulting member assignment. Observe reconstruction through its actual completion and preserve the reported health information rather than assuming a predetermined duration.\nCheck the recreated spare VDEV separately and compare all final identities with the diagram. Have the storage owner review remaining errors, workload observations and reserve capacity before accepting the result. Retain before-and-after pool records and the second-person device check. Escalate an unexplained state instead of repeating a destructive action to obtain the expected screen.\nOfficial references\n\nTrueNAS — Replacing Disks — official product documentation; confirm the installed release and configuration.\n\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change.", "content_markdown": "Bottom line: Check whether the spare has already entered the data VDEV before planning the next disk action. Treat promotion of that active spare and restoration of the spare reserve as separate steps with separately checked device identities.\n\n## Source fact: what the authority says\n\nThe [TrueNAS replacement guide](https://www.truenas.com/docs/scale/25.10/scaletutorials/storage/disks/replacingdisks/) says an available hot spare is automatically inserted into a data VDEV when an active drive fails, followed by a resilver. Its hot-spare procedure takes the failed disk offline, detaches that failed disk to promote the spare, then recreates the spare VDEV. The guide warns that using its ordinary replacement branch after a spare has entered the pool causes two resilvers and recommends promotion followed by recreating the reserve instead. A replacement disk must have at least the failed disk’s capacity, and the replacement process wipes its data.\n\n## What the source does not establish\n\nThese are the versioned TrueNAS procedures, not a diagnosis of the present pool or a compatibility statement for a drive. DSE leaves the actual hardware choice and any unsafe or unclear device state to the responsible storage owner and applicable manufacturer guidance.\n\n## Applicability questions\n\n- Which physical disk failed, and what evidence maps that identity to the displayed VDEV member?\n\n- Is a spare already active, and what reconstruction activity remains in progress?\n\n- Which documented branch matches that observed state?\n\n- What approved disk will restore the spare reserve, and is any existing data on it authorized for destruction?\n\n## DSE recommendation: controlled next steps\n\nThe following steps are DSE recommendations based on the cited source.\n\nDSE recommends a before-action pool diagram showing the failed device, active replacement or spare, and remaining reserve. Have a second person check the physical-to-logical device mapping before removal. Write the selected branch beside the diagram so an operator does not begin the no-spare procedure merely because that is the first replacement sequence in the guide.\n\nFor a proposed case with an already activated spare, walk through promotion and recreation of the reserve as two different decisions. Identify which failed member would be detached and which new disk would become the spare. Keep the new disk’s identity, capacity and disposition of any existing contents explicit. Pause if the displayed state differs from the reviewed diagram.\n\nPlan the service observation around the actual reconstruction state and the owner’s workload constraints. Keep any force option outside the ordinary plan until its purpose and destructive consequence have been separately reviewed. Do not close the incident on a completed physical swap alone; require the resulting member and reserve assignments to be reconciled with the intended pool design.\n\nHave the final diagram show the promoted data member and newly assigned reserve as distinct identities. Require the reviewer to locate both in the actual status evidence. A familiar enclosure slot or reused disk description should not replace that identity check.\n\n## Verification and evidence\n\nProposed verification: rehearse the selected branch only on a disposable pool or under an appropriately approved storage procedure. Record the initial active-spare state, exact targeted device and resulting member assignment. Observe reconstruction through its actual completion and preserve the reported health information rather than assuming a predetermined duration.\n\nCheck the recreated spare VDEV separately and compare all final identities with the diagram. Have the storage owner review remaining errors, workload observations and reserve capacity before accepting the result. Retain before-and-after pool records and the second-person device check. Escalate an unexplained state instead of repeating a destructive action to obtain the expected screen.\n\n## Official references\n\n- [TrueNAS — Replacing Disks](https://www.truenas.com/docs/scale/25.10/scaletutorials/storage/disks/replacingdisks/) — official product documentation; confirm the installed release and configuration.\n\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/", "url": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-10-28" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Business Continuity", "item": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "ListItem", "position": 3, "name": "Review TrueNAS hot-spare promotion before replacing a failed disk", "item": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/#article", "identifier": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/", "url": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/", "headline": "Review TrueNAS hot-spare promotion before replacing a failed disk", "description": "TrueNAS documents a distinct recovery branch when a hot spare is already active: promote it and recreate the spare VDEV rather than planning an extra resilver.", "abstract": "TrueNAS documents a distinct recovery branch when a hot spare is already active: promote it and recreate the spare VDEV rather than planning an extra resilver.", "articleBody": "Bottom line: Check whether the spare has already entered the data VDEV before planning the next disk action. Treat promotion of that active spare and restoration of the spare reserve as separate steps with separately checked device identities.\nSource fact: what the authority says\nThe TrueNAS replacement guide says an available hot spare is automatically inserted into a data VDEV when an active drive fails, followed by a resilver. Its hot-spare procedure takes the failed disk offline, detaches that failed disk to promote the spare, then recreates the spare VDEV. The guide warns that using its ordinary replacement branch after a spare has entered the pool causes two resilvers and recommends promotion followed by recreating the reserve instead. A replacement disk must have at least the failed disk’s capacity, and the replacement process wipes its data.\nWhat the source does not establish\nThese are the versioned TrueNAS procedures, not a diagnosis of the present pool or a compatibility statement for a drive. DSE leaves the actual hardware choice and any unsafe or unclear device state to the responsible storage owner and applicable manufacturer guidance.\nApplicability questions\n\nWhich physical disk failed, and what evidence maps that identity to the displayed VDEV member?\nIs a spare already active, and what reconstruction activity remains in progress?\nWhich documented branch matches that observed state?\nWhat approved disk will restore the spare reserve, and is any existing data on it authorized for destruction?\n\nDSE recommendation: controlled next steps\nThe following steps are DSE recommendations based on the cited source.\nDSE recommends a before-action pool diagram showing the failed device, active replacement or spare, and remaining reserve. Have a second person check the physical-to-logical device mapping before removal. Write the selected branch beside the diagram so an operator does not begin the no-spare procedure merely because that is the first replacement sequence in the guide.\nFor a proposed case with an already activated spare, walk through promotion and recreation of the reserve as two different decisions. Identify which failed member would be detached and which new disk would become the spare. Keep the new disk’s identity, capacity and disposition of any existing contents explicit. Pause if the displayed state differs from the reviewed diagram.\nPlan the service observation around the actual reconstruction state and the owner’s workload constraints. Keep any force option outside the ordinary plan until its purpose and destructive consequence have been separately reviewed. Do not close the incident on a completed physical swap alone; require the resulting member and reserve assignments to be reconciled with the intended pool design.\nHave the final diagram show the promoted data member and newly assigned reserve as distinct identities. Require the reviewer to locate both in the actual status evidence. A familiar enclosure slot or reused disk description should not replace that identity check.\nVerification and evidence\nProposed verification: rehearse the selected branch only on a disposable pool or under an appropriately approved storage procedure. Record the initial active-spare state, exact targeted device and resulting member assignment. Observe reconstruction through its actual completion and preserve the reported health information rather than assuming a predetermined duration.\nCheck the recreated spare VDEV separately and compare all final identities with the diagram. Have the storage owner review remaining errors, workload observations and reserve capacity before accepting the result. Retain before-and-after pool records and the second-person device check. Escalate an unexplained state instead of repeating a destructive action to obtain the expected screen.\nOfficial references\n\nTrueNAS — Replacing Disks — official product documentation; confirm the installed release and configuration.\n\nSource review completed October 28, 2026. Recheck the official documentation and deployment-specific applicability before a production change.", "datePublished": "2026-10-29T00:10:05+00:00", "dateModified": "2026-10-29T00:10:35+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/review-truenas-hot-spare-promotion-before-replacing-a-failed-disk/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Review TrueNAS hot-spare promotion before replacing a failed disk" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Advisory priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 604, "timeRequired": "PT3M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "TrueNAS — Replacing Disks", "url": "https://www.truenas.com/docs/scale/25.10/scaletutorials/storage/disks/replacingdisks/" } } ] } }