OK this may have been discussed before, but I can only find fragments of info, nothing really clear.

 

I need to setup a small server for a friend that currently uses a Windows machine with VeraCrypt on an encrypted (400GB?) file that then shares (the unencrypted volume) over his network.

When his Windows machine reboots, he needs to re-enter the password for the encrypted volume then the share works.

 

It works more or less well, but since he will move to UNRAID, I want to provide him a way to again have a way to encrypt his data (not all his data, not even 400GB are needed, probably way less).

 

I know UNRAID supports encrypting whole disks (although I didn't find a guide for this), but I have questions:

 

1) How to set this up? (found the guide in the docs, but doesn't give any info on how to use after the setup)

 

2) How will this work after server reboot? (having to go to web interface to enter a password or something is fine - if it doesn't do that, the problem is that someone that can take the whole machine and start it, the decryption is automatic, so like non-existent)

 

3) Can I do some kind of encryption only on a single folder or share?

 

4) Some alternative way? (possibly through a plugin or container) Encrypted "whatever" needs to be accessible using SMB and allow a way to unlock of course.

 

Help?

 

 

Edited June 17, 20224 yr by NLS

Unraid allows you to format disks using an encrypted file system. 

 

You are probably familiar with formatting NTFS or FAT file system on Windows. Unraid has other file system choices, including encrypted file systems.

 

I sometimes use bit locker vhd stored on my Unraid server and Windows will let me access from there. This is probably similar to the Veracrypt volume but not sure how that might work over network.