Problems setting up encrypted Disks - Encryption in Unraid is broken


Recommended Posts

  • 1 year later...

This issue caused me some headache as well...

 

Turns out the Intel C3000 Atom platform has support for something called Intel QuickAssist Technology (Intel QAT, https://www.intel.com/content/www/us/en/architecture-and-technology/intel-quick-assist-technology-overview.html). The kernel driver for this feature is what is causing the issue with LUKS/dm-crypt.

 

The QAT kernel driver takes precedence when both AES-NI and QAT is activated so the solution is to either blacklist the kernel module or disabling the QAT feature in BIOS. I have a Super Micro board and the setting for QAT was found under the south bridge configuration (IQAT).

 

As a bonus the performance with AES-NI compared to QAT was twice as fast (according to cryptsetup benchmark)

Link to comment
1 hour ago, inf said:

This issue caused me some headache as well...

 

Turns out the Intel C3000 Atom platform has support for something called Intel QuickAssist Technology (Intel QAT, https://www.intel.com/content/www/us/en/architecture-and-technology/intel-quick-assist-technology-overview.html). The kernel driver for this feature is what is causing the issue with LUKS/dm-crypt.

 

The QAT kernel driver takes precedence when both AES-NI and QAT is activated so the solution is to either blacklist the kernel module or disabling the QAT feature in BIOS. I have a Super Micro board and the setting for QAT was found under the south bridge configuration (IQAT).

 

As a bonus the performance with AES-NI compared to QAT was twice as fast (according to cryptsetup benchmark)

Thanks for your follow up. I had given up on using encryption with unraid but I will look into turning of QAT through BIOS  and try it again.

 

bubiman

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.