Re-enabling volume encryption in TOS6

[never75]

Hello,
TOS5 did allow volume encryption but this option, while still possible using CLI,is not present anymore in the GUI of TOS6.
Can you please re-enable it?
This function is also advertised for new terramaster units.

Many thanks!

[TMnick]

Hello, could you please share a screenshot of this feature in TOS 5? We don’t have this functionality implemented in the UI for TOS 5 or 6—it can only be executed via command line.

[athurdent]

Hello, could you please share a screenshot of this feature in TOS 5? We don’t have this functionality implemented in the UI for TOS 5 or 6—it can only be executed via command line.

Hi,
can you perhaps guide me on how to encrypt a volume via command line in TOS please?
I searched the community but could not find an official or unofficial how-to.
Many thanks in advance!

[TMzethar]

Sorry, we cannot assist you with this. This operation is beyond standard support scope and may affect normal usage and data security.

[athurdent]

Sorry, we cannot assist you with this. This operation is beyond standard support scope and may affect normal usage and data security.

Thank you for the swift response!

Where would I find this feature in my NAS then?

AES 256-bit Disk Array Encryption Protection
Advanced disk array encryption allows server administrators to create AES 256-bit encrypted disk arrays on the NAS during initial installation. The user can unlock the encrypted disk and access data only through the previously set key password.

Source: https://www.terra-master.com/uk/press/i ... w/id/1320/

[TMzethar]

Regarding AES 256-bit Disk Array Encryption Protection, it has never been implemented. This was an oversight, and I have informed the team to either modify the description or remove it.

[athurdent]

Regarding AES 256-bit Disk Array Encryption Protection, it has never been implemented. This was an oversight, and I have informed the team to either modify the description or remove it.

Thanks!

This would be a feature request then, I guess?

E.g. QNAP has TCG/OPAL or LUKS encryption. This is needed if:

• your NAS or drives get stolen, so nobody can access your data

• you need to RMA one or more disks, and cannot destroy data on defective disks anymore. It's possible that afterwards a refurbished drive may have your data on it, I remember reading about this actually happening

Is TCG/OPAL (low hanging fruit, those disks always encrypt anyways, we just need to be able to set a new password with sedutil) or LUKS encryption (may impact performance, but with the awesome CPUs TerraMaster uses probably neglect-able) on the road map?

Otherwise I'd like to request that feature, please!

I know there's eCrpytFS folder encryption, but IIRC the code is no longer maintained and character limits may apply.
Thanks!

[athurdent]

Hi, has this feature request been accepted? Or do I need to post a separate topic, as this one is for re-enablement when it seems we need enablement?

On a side note, I recently found some LUKS error messages in a log file on the NAS, so perhaps this is already being implemented in the backend? There's also

Code: Select all

/etc/init.d/nas/luksmnt

Please let me know how to proceed, full disk encryption is vital for some of us for the reasons given above. Thanks!

[storageninja]

I strongly recommend implementing TCG/OPAL or LUKS encryption support. Native disk encryption ensures data confidentiality in case of drive theft or RMA handling. It also aligns with enterprise security standards, making the NAS suitable for regulated environments. Adding this feature would significantly increase trust and adoption among security-conscious customers.

[Gremlin]

Adding this feature would significantly increase trust and adoption among security-conscious customers.

and, no doubt, make it more expensive for the budget minded users in the long run. In which case I would suggest an "Enterprise TOS" which could have all the bells and whistles AT A PRICE!