How to decommission a server room: a checklist for businesses

What decommissioning a server room involves

Decommissioning a server room means retiring everything in it, from servers, storage and network gear to racks, cabling and power equipment, in a planned, documented way. Done well, nothing important is lost, no data walks out the door and you have a clear record of where every device went.

The work usually falls into three phases: before (planning, migration, inventory), during (data destruction, power-down, removal) and after (certificates and records).

Step 1: Plan the timeline and the team

For a typical small or mid-size server room, start planning 30 to 90 days before the room needs to be empty. Larger rooms or ones tied to a lease end date need more lead time.

• Name one owner for the project, usually the IT manager or your MSP
• Loop in facilities for loading dock, elevator and after-hours access
• Loop in compliance or legal if you handle health, student or financial data
• Set a hard "room empty" date and work backward from it
• Choose your disposition vendor early so pickup fits your schedule

Step 2: Migrate and confirm before anything goes dark

The most expensive mistake is decommissioning a server that something still depends on. Before any equipment is powered off for good:

• Confirm every workload has moved to its new home and is running
• Take and test final backups, and make sure you can actually restore from them
• Check data retention rules and legal holds before any data is destroyed
• Leave a quiet period, often one to two weeks, with servers powered off but intact, in case something was missed
• Cancel what you no longer need: support contracts, software licenses, internet circuits and colocation agreements

Step 3: Build a complete inventory

Your inventory is the backbone of the whole project. For each item, record:

1. Device type, make and model
2. Serial number and your asset tag
3. Number of drives inside, and their serial numbers if you can capture them
4. Working condition: working, not working or unknown
5. Plan for the device: resell, destroy data and dispose, or keep

Don't forget the equipment that's easy to overlook: storage arrays, backup appliances, tape libraries and loose tapes, spare drives in a drawer, and UPS units.

Step 4: Decide what gets resold and what gets destroyed

Newer, fully working equipment can often be sold to offset the cost of the project. At iRecycleKC, we buy back fully working equipment made within the last 3 years, or within the last 5 years for larger quantities of 75 or more units. Equipment outside those limits is still handled securely. It just doesn't have resale value.

Whatever you decide, the data comes first. A server is only ready to resell after its drives are wiped and verified.

Step 5: Handle every device that stores data

Servers aren't the only things in the room holding sensitive information. Plan for:

• Server and storage drives, including hard drives and SSDs
• Backup media such as tapes, external drives and backup appliances
• Network gear: switches, routers and firewalls store configurations, passwords and VPN keys, so factory-reset them or have them handled with your drives
• Anything with a flash card or internal storage, such as management controllers and appliances

You have two main options for drives:

Either way, ask for documentation that lists each drive by serial number. Learn more about our data wiping and hard drive destruction.

Step 6: Power down and de-install

• Shut down in a planned order, starting with applications and ending with core network and power
• Label everything with its asset tag before it leaves the rack
• Keep drives with their servers or bag and label them, so the serials match your inventory
• Ask your vendor what's included: unplugging and unracking equipment, rack removal and cabling differ from job to job
• Don't leave the UPS batteries behind: they're part of the room and need proper handling, too
• Plan for weight: loaded racks and UPS batteries are heavy, so confirm dock and elevator access ahead of time

Step 7: Pickup and chain of custody

Chain of custody is the record of who had your equipment and when. Before anything leaves your building:

• Count and sign off on what's being picked up against your inventory
• Keep a copy of the pickup paperwork with the date and number of items
• Know where the equipment is going and how long until data destruction
• Ask where it ends up: any material that isn't resold should go through R2v3-certified downstream partners

Step 8: Collect and file the paperwork

When the project is finished, you should have:

1. Your final inventory, showing what happened to each device
2. A certificate of data destruction listing drives by serial number and the method used
3. A certificate for the remaining equipment confirming it was handled responsibly
4. A settlement report for any equipment that was bought back

File these together with your IT asset records. Not sure what a good certificate looks like? Read what a certificate of data destruction should include.

Common mistakes to avoid

• Powering off before migration is confirmed
• Forgetting the spare drives, tapes and network gear
• Pulling drives without labeling them, which breaks the link to your inventory
• Choosing a vendor at the last minute and rushing pickup
• Accepting a generic receipt instead of serial-numbered certificates

Retiring laptops and desktops too? Read our checklist for disposing of company computers. IT providers can also earn referral fees through our MSP partner program.

About the author

Asencio Renteria-vigil is COO of iRecycleKC, a Kansas City IT asset disposition and data destruction company with 19+ years in the industry.