Encryption

[Hussie]

Hi,

 

I'm a new Unraid user and currently testing the Unraid OS (latest stable release) on my HP Microserver GEN8 .

 

The problem I have is with encrypting the array disks.

After a reboot only the first disk get unecrypted.

I have to reformat the remaining disks each time after a reboot.

 

 

Maybe a experienced user can help me out?

 

Edited December 8, 2020 by Hussie

[trurl]

Very unclear from your description exactly what you have done.

13 minutes ago, Hussie said:

encrypting the array disks (1xparity 3xarray)

Parity does not get encrypted because it has no filesystem and contains no data.

 

The normal way to encrypt array data disks in Unraid is to assign them to the array and format them to an encrypted filesystem.

 

How exactly are you selecting the filesystem to use for formatting?

 

[Hussie]

Sorry I know that it's not possible to encrypt the parity disk.

 

1. Stop the array.

2. I change the format of each disk to xfs encypted, apply.

3. Passphrasse generated by ASCII password generator.

4. start array

5. Formatting the disks

Edited December 6, 2020 by Hussie

[trurl]

If possible before rebooting and preferably with the array started
Go to Tools - Diagnostics and attach the complete Diagnostics ZIP file to your NEXT post in this thread.

[Hussie]

The log file and screenshot of the main page.

tower-diagnostics-20201206-2101.zip

[trurl]

I don't use encryption, but your diagnostics show all data disks as luks:xfs but 2 of them are not mounting because the key is wrong.

 

Are you perhaps doing something to try to give different keys to different disks? Only one key is used by the whole system.

[Hussie]

No i followed the steps on the wiki page.

 

I reformated back all the three disks to xrfs and after a reboot I tried it again but it didn't help

[Hussie]

How can I open a support ticket?

[trurl]

Free support is on the forum. If you want paid support see the Contact link at the bottom of the forum.

[trurl]

Since you don't have any data yet see if you can format all disks without encryption so they are all mountable, then reformat just one of them to encrypted.

 

Then post new diagnostics without rebooting

[trurl]

Also here is the wiki link on Encryption:

https://wiki.unraid.net/UnRAID_6/Security#Encryption

[Hussie]

All disk formated back to XFS and mounted.

 

 Then I formated disk 1 to XFS-Encrypted.

See screenshots and attachment for diagnotics.

 

Thank you for your time.

 

1.

 

2.

 

3.

 

 

 

tower-diagnostics-20201207-2339.zip

 

Update: I even tried it with a keyfile but still the same issue, only the first drive gets de-encrypted and the other two shows wrong encryption key. 

Edited December 7, 2020 by Hussie

[trurl]

Here is the release thread from when encryption was first introduced. Don't know if there will be anything there for you or not. Might at least give some idea who might be able to help since I don't use that feature.

 

[Hussie]

Not very much information about encryption user cases.

 

I will contact the support team.

 

Thank you.

[itimpi]

11 minutes ago, Hussie said:

Not very much information about encryption user cases.

 

I will contact the support team.

 

Thank you.

If you get anything useful then please provide the details and I can look into adding it to the information provided here in the online documentation that can be accessed via the 'Manual' link at the bottom of the Unraid GUI.

[Hussie]

Does anyone know how long it will take for limetech to answer my support ticket? 

I'm asking it becauss of the trial license.

 

At the moment I can't use my server because I want to encrypt the disks.

 

Maybe we can tag some active limetech support members here?

[Squid]

@jonp

[jonp]

Hi, can you try something very basic for me?  Go through the steps you did again, but for the password, just use password123 for the password and see if that works.  I'm wondering if because of special characters in the encryption phrase it's messing up parsing or something simple like that.  Let's verify if its a bug like that before we go any further.

 

All the best,

 

JonP

[Hussie]

Hi Jonp,

 

I did it again with "password123" but still the same problem.

Only two of the three disks gets unecrypted.

 

Thank you

[jonp]

What version of Unraid are you running?  6.8.3 or 6.9-rc1?

[Hussie]

6.8.3

[jonp]

Ok, this is definitely abnormal behavior.  I will need to take a look at the logs again in the morning.  Nothing jumped out at me on a quick scan, but I want to double-check a few things.  So you're 100% sure there is nothing abnormal about your setup?  It's very odd to me that one drive is unlocked and the rest aren't.  This is doubly true considering you tried just 'password123' without any special characters.

[jonp]

Those don't happen to be SSDs do they?

[Hussie]

Yes just 'password123' and no SSDs.

There is nothing special in the current setup. 

Basic Unraid installation with nothing configured.

Edited December 14, 2020 by Hussie

[Hussie]

Even with 6.9.0-rc1 the same problem.

Only two of the three disks get de-encrypted

 

It's really frustating because i can't use my server at the moment.