TOS7 Feature Request: Hard drive encryption

[gigglypuff]

TOS5 used to have drive encryption. Can this please be added back to TOS7?

[OrionXie]

Hello, in our TOS5 system, the system itself does not have a built-in full-disk encryption function. Furthermore, there are currently no plans to include this function in TOS7. However, we do have encryption functionality for shared folders.
If needed, you can refer to this method for setup: Control Panel - Access Permissions - Shared Folders - Create New Encrypted Folder - Encrypt Shared Folder.

[TMroy]

In a NAS system, the storage space is built upon storage pools and volumes, which in turn are composed of physical disks. However, from the user's perspective, the system does not present itself at the disk level. Therefore, the concept of "disk encryption" doesn't apply; instead, encryption is implemented at the level of volumes or shared folders. While shared folder encryption is an existing feature, volume-level encryption is not currently available. May I ask what specific need is prompting your request for such a functionality?

[adrienmoreau]

I really hope this gets added back

TOS5 had drive encryption and it was a very important feature for security and data protection. I don’t understand why it was removed in TOS7. For many of us, especially those storing sensitive or business data, built-in hard drive encryption is essential - not just a “nice to have.”

Please consider bringing drive encryption back to TOS7. It would greatly improve security and give users more confidence in the platform.

[gigglypuff]

In a NAS system, the storage space is built upon storage pools and volumes, which in turn are composed of physical disks. However, from the user's perspective, the system does not present itself at the disk level. Therefore, the concept of "disk encryption" doesn't apply; instead, encryption is implemented at the level of volumes or shared folders. While shared folder encryption is an existing feature, volume-level encryption is not currently available. May I ask what specific need is prompting your request for such a functionality?

Thank you for the reply.

For security purposes e.g. if a robber steals the HDD on the NAS, I would have peace of mind if the data on the HDD is encrypted and cannot be read by the robber.

I read on the forums somewhere TOS5 used to have a feature like this but was removed in TOS6.

[Gremlin]

I suspect with the later kernels it would be more difficult. I doubt if full drive encryption would be something that could be turned on or off and would need to built in at the very earliest stage. Not something for users with large amounts of already existing data without a deal of effort. Given the price of storage now, I can easily see why someone might just steal the drive whereas in the past the whole nas might have been tucked under the (metaphorical) arm and walked off.

[EriChan]

We understand your concern regarding physical hard drive theft. The existing Shared Folder Encryption already protects against this scenario:

Protection Against Physical Theft: Physical hard drives in a NAS operate as underlying components of storage pools and volumes. When you enable encryption on a shared folder containing your sensitive data, that data remains encrypted at rest. If a hard drive is physically removed and attached to another computer, the encrypted files cannot be read without your decryption key or password.

• Clarification on TOS 5 / TOS 6: Built-in full-disk encryption was never present in TOS 5 or TOS 6. The encryption functionality referenced in earlier versions was this same shared-folder encryption mechanism.

• How to Enable: You can configure this via Control Panel > Access Permissions > Shared Folders > Create New Encrypted Folder (or encrypt an existing folder). Please ensure your encryption key is kept securely outside the NAS.

• We recommend using shared folder encryption to secure your sensitive data. In addition, we have recorded your feedback regarding volume-level encryption for our product team to evaluate for future roadmap considerations.

Thank you for your feedback and support!

[TMroy]

Actually, achieving your goal is quite simple — it can be done right now. TOS 7 natively supports encrypted shared folders. You can store all your data in encrypted folders, and you can create multiple encrypted folders. Since the data is encrypted, even if your hard drives are stolen, the data inside the encrypted folders still cannot be read.