Encrypted array system tied to key stored on usb stick + password.

 

For situations requiring securing of data on archival servers only turned on when access is required. as long an encryption sequence as is feasible.

this way at the end of a working day or during downtime, concerns about sensitive data being interfered with will not be an issue, meaning that instead of having to lock a server in a safe or strong room, that a usb key merely needs to be taken off the premises and stored safely

additionally to this, to protect against total loss if a unraid key is lost or damaged, the small key key file could be stored innocuously anywhere as an additional backup & where a password is still needed even where both the drives and key are present, this should provide one more hurdle to prevent uninvited tampering

 

Not that everyone would need such a thing, but it would be damned handy & something which i would happily use at a workplaces file server to lock up commercially sensitive data when the day is done and dusted

 

Interesting idea.

 

Backing up the key file alone won't work, since the key AND the flash drive's GUID need to match for unRAID plus/pro to be enabled.  So if you lose the original flash drive, you would be SOL.

 

What might be a better solution is to have a primary unRAID key with the unRAID license that stays with the server at all times (install it internally to avoid confusion).  Then have a secondary flash drive that only contains the decryption key.  This one you could take off site, make copies of, etc.

Encrypted array system tied to key stored on usb stick + password.

 

+1 from my side!

 

I am working from home-office a lot.

This way I could archive/temp-store/backup/... to my unRAID box

when being connected with my company laptop (where full disk encryption is a MUST).

 

...haven't seen seen this feature on the roadmap that has been

published on the fresh unRAID development site, though.

 

regards,

      Ford

I think I'd like to see this as well. Something akin to TrueCrypt where the volumes are encrypted requiring a console password to access the data would work for me. My primary concern would be encrypting the data "at rest" such that if someone takes my server and powers it up elsewhere they get nothing without my password. My servers are powered most of the time and I wouldn't want to rely on a hardware "key" since chances are high that would be stolen too.

 

I've got a ton of data on my servers. If someone steals them I would very much like to have the satisfaction of knowing I have denied them as much benefit as possible. Seems to me something like TrueCrypt with single encrypted partitions per HDD might do the trick with a little work. Am I nutz?

so with the forums being moved all around - where do feature requests like this one belong? I think crypto would be pretty darned nice and give me some piece of mind....