[Help] TOS6: encrypted shared folders are auto mounted after reboot

[SergP]

No.
Mounting now does not happen automatically at system startup, and I need to enter a passphrase for each shared folder in the web interface.
I thought it happened as part of this forum thread.

I could not find the changelog for the latest versions of the system and verify that such a change had been made. My version is currently 6.0.673

[crisisacting]

It would never mount automatically; an encrypted folder always requires passcode re-entry upon restart (it's been this way since the introduction of encrypted folder in TOS).

As Rob68 pointed out, the whole point is that if power-cycled due to theft, if the thief somehow got into TOS, they'd then be met with yet another obstacle to getting access to any data on the drives; even if the drives are pulled & mounted onto a Linux distribution, these folders & their encryption persist and the data is inaccessible until the correct passcode is entered.

[SergP]

But previously, my encrypted folders were mounted automatically after a reboot. Not now.
I understand the reasons why this is more secure, but I would like to be able to cache the password during reboot. It used to work.

Maybe add other automounting mechanisms, for example, the ability to download a key from a local network via smb/webdav/etc?
Then, if the device is physically stolen, you will need to physically steal another device with the key file.

[crisisacting]

A former competitor to TOS (ReadyNAS OS) allowed for their key(file) to be stored in a USB drive; as long as it was inserted & present upon reboot/startup, their OS would auto-mount the corresponding encrypted folder accordingly.

A caveat of that, having previously implemented that former competitors' solution for clients, is select businesses would just keep that USB drive mounted to the NAS, thus defeating the purpose of said additional security, especially in the event the device was stolen.

As long as best practices can be put in place to avoid that laziness situation, having the ability to generate individual key files for each encrypted folder could be a welcomed addition for certain uses.

[SergP]

I found the /etc/tos/scripts/ecryptfs_mount script that mounts protected folders. It can be used in your own automount scenarios (including with thoughtful protection)

Maybe someone will need this information!