Can encryption be enabled with a passphrase per disk or just per server? I am in the process of encrypting disks and replacing the encfs setup I had. I liked encrypting per share/folder and would like to do something similar per disk so I can control access to encrypted drives separately. Encfs was cumbersome and I am not good enough to support myself if there were ever an issue, so I am moving to the supported unraid encryption.

 

Another question, can/should the parity drive be encrypted, or is it just making parity data from encrypted files?

Edited January 27, 20197 yr by rbronco21
parity question added

Right now encryption is only one key for the entire array, as well as encrypted unassigned devices. This is painful a as you cannot plug in an encrypted unassigned device with a different key.

The limiting factor is the unRaid GUI only supports one key for the entire array including all plugged in unassigned devices. The underlying technology is well able to support multiple keys but the GUI needs to add support for this

Sent from my chisel, carved into granite

3 hours ago, rbronco21 said:

Another question, can/should the parity drive be encrypted, or is it just making parity data from encrypted files?

Generally the parity drive has no intact data on it. No filesystem or files. It doesn't keep parity data from files either, only entire drives.

https://wiki.unraid.net/Parity#How_parity_works

 

2 minutes ago, jonathanm said:

Generally the parity drive has no intact data on it. No filesystem or files. It doesn't keep parity data from files either, only entire drives.

https://wiki.unraid.net/Parity#How_parity_works

 

Thanks for the response, and I appreciate the link. Cool to see how the magic really works.