Encryption

[jonp]

Ok, I've had to escalate to the dev team as I have no idea what's wrong.  Will get back to you.

[limetech]

Please try this:

1. Stop array, select each data disk and set its file system type to "xfs".
2. Start array, and then click Format, let it complete and observe that all disks 'mounted', everything looks good.
3. Stop array, select each data disk and set file system type to "xfs-encrypted" (all 3 of them).
4. Start array, observe that all 3 data disks should show 'Unformatted'.  Enter your encryption key and click Format.

At this point, all should show up as encrypted and mounted.  Buf if not, please capture diagnostics at this point and post here.

[Hussie]

All disks mounted and XFS  formatted:

Array stopped:

 

Disk 1 XFS Encrypted

 

Disk 2 XFS Encrypted

 

Disk 3 XFS Encrypted

 

Passphrase set "password123"

 

Formatting disks:

 

Disks Encrypted & Unlocked

 

(downloaded diagnotistics before reboot)

 

REBOOTING SERVER...

 

After server reboot disks encrypted & locked

 

Enter Passphrase and Start...

 

And two of the three disks get unlocked and the third stays encrypted...

 

I have also attached two diagnostics..one before reboot and one after..

BEFORE REBOOT_tower-diagnostics-20201216-2144.zip AFTER REBOOT_tower-diagnostics-20201216-2152.zip

Edited December 16, 2020 by Hussie

[limetech]

21 minutes ago, Hussie said:

I have also attached two diagnostics..one before reboot and one after..

Thank you for the detailed info.  If you reboot again is it the same 'disk3' that again reports wrong key?

[Hussie]

Yes still the same...

It's not a disk problem because when I only encrypt disk 1 & 2 I have the same issue 

[trurl]

Probably not the problem, but I noticed this screenshot still has the APPLY button enabled as if the change hadn't been applied.

1 hour ago, Hussie said:

Disk 1 XFS Encrypted

 

 

[Hussie]

You can see in the screenshots after that the disk is xfs encrypted.

 

Update:

I will run DBAN to format the disks and check for errors.

Edited December 17, 2020 by Hussie

[Hussie]

Yes it works now!

 

Running DBAN solved my problem. Probarly some hidden partition.

 

Everyone thank you for the patience and efford!

 

Is it possible to extend my trail license with 15 days? I have now 15 days remainig.

 

 

[ChatNoir]

At the end of the initial 30 days trial, it is possible to extend the trial license for 15 days, two times directly from the interface.

For additional time, you would have to discuss this directly with Limetech.

[limetech]

1 hour ago, Hussie said:

Running DBAN solved my problem. Probarly some hidden partition.

How did running this util fix it?

[Hussie]

2 hours ago, ChatNoir said:

At the end of the initial 30 days trial, it is possible to extend the trial license for 15 days, two times directly from the interface.

For additional time, you would have to discuss this directly with Limetech.

Great!

1 hour ago, limetech said:

How did running this util fix it?

DBAN is a data wiping software so I assume that some hidden files or partition(s) on the disks caused the problem with encryption.

www.dban.org

[limetech]

1 hour ago, Hussie said:

DBAN is a data wiping software so I assume that some hidden files or partition(s) on the disks caused the problem with encryption.

www.dban.org

I know what it does, just not how this fixed anything because when Unraid OS formats a device we create an entirely new partition structure - no hidden partitions, no hidden files.  It's a mystery...

[JorgeB]

Unrelated but make sure those hard drives are patched, or they can cause data loss when polled by smartmontools, and you can't even tell by the firmware version, to be sure you must run the update (if not done yet).

 

https://www.smartmontools.org/wiki/SamsungF4EGBadBlocks

[Hussie]

9 hours ago, limetech said:

I know what it does, just not how this fixed anything because when Unraid OS formats a device we create an entirely new partition structure - no hidden partitions, no hidden files.  It's a mystery...

I'm 100% sure I followed the right steps with setting up encryption. There is nothing that can go wrong. DBAN takes his time to re-format the disk so maybe the Unraid OS formats the disks there are still some files left...I don't know.

Encryption works now and I can finish up my configuration

 

Maybe this topic will help someone out in the future.

 

2 hours ago, JorgeB said:

Unrelated but make sure those hard drives are patched, or they can cause data loss when polled by smartmontools, and you can't even tell by the firmware version, to be sure you must run the update (if not done yet).

 

https://www.smartmontools.org/wiki/SamsungF4EGBadBlocks

Disks are already patched but thanks for the reminder.