[Precautions before encrypting array disks with LUKS]

USB cable. Sorry I wasn't clear earlier.

[Precautions before encrypting array disks with LUKS]

On 6/1/2021 at 7:08 PM, jonathanm said:

Links to parts you plan to use? I'm curious how you are planning to accomplish that. Keystone AF / AF with AM / AM cable connected to the server?

USB Keystone. I believe I have enough room in the wall, if not, I'll use a small USB jumper cable.

I only plan to do this with the decryption key if possible, otherwise I put the whole thing inside wall. 

 

(I included the names instead of links so you can choose your own vender. Amazon is faster, but eBay is cheaper, especially when buying in bulk.)

 

USB 3.0 Keystone                     SAMSUNG MUF-32AB/AM FIT Plus 32GB

[Precautions before encrypting array disks with LUKS]

On 1/27/2021 at 7:58 AM, IamSpartacus said:

 

To picky back off of this, you can also autostart your encrypted array without having the key stored on your USB.  I edited my go file to auto start my array with the key on a network device connected to my network across a site to site VPN connection that is offsite.  There are other options as well such as what's shown in this video.
 

 

Sorry if this question has already been asked, but I plan on putting mine on a USB key that is behind a keystone wall jack. I'm making the assumption that a thief will not be taking my wall plates apart to search for a USB key. I haven't set this up yet, but plan on resetting my server with encryption. I'm a novice user, but I'm not seeing any reason why this wouldn't work for others.

[Encrypt existing partition]

I know that unRaid doesn't support the encryption of existing partitions without data loss, but I'm wondering, if there any reason why I couldn't remove a drive, use Ubuntu to encrypt the partition then, reinstall it in my array? 

 

 

[Unraid encryption & NFC]

I'm wanting to use an NFC card to decrypt my drives on startup. Is this possible with unRaid?

 

Basically, I can attach the NFC card and have the unRaid server close enough to read the card.