NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
ReadyNAS Encrypted Drive
I am still new to Ready NAS so I apologise if this thread is in the wrong location. I have 3 questions and any help would be appreciated. 1. If I use ReadyNAS to encrypt a drive, what encryp...
1. Per the spec sheet, 256bit AES.
2. No. The ReadyNAS encrypts at volume level and does not allow you to create multiple volumes on a drive.
3. Not sure what you are asking. If you mean will the encryption also include a second drive if added, the answer is yes if you use XRAID or FlexRAID to expand the existing volume. It is no if you use FlexRAID to create a separate volume.
Do multiple users or devices need to access your encrypted data simultaneously? If not, using VeraCrypt to create a virtual encrypted drive may be your best approach. That is the solution I use.
Thank you for your reply.
I've just re-read my 3rd question and it is unclear. However, now you have answered my 2nd question and mentioned the use of VeraCrypt my question has changed and is as follows.
If I have got a VeraCrypt encrypted container on my NAS, will it replicate correctly across both disks in the NAS (using RAID) if the volume is not mounted? Whenever I have used VeraCrypt in the past you had to mount the drive to backup the contents in the encrypted container.
If you mean will it be correct if you add a second drive after the VeraCrypt volume has been created, I think it has to be not mounted at the time for proper redundancy. I really don't know what the NAS does with open files when it re-syncs. For all other cases, a VeraCrypt virtual disk file will be properly redundant across the NAS volume whether mounted in VeraCrypt or not. Snapshots will be valid. It will also copy (so the copy can be mounted in VeraCrypt just like the original) if it is not currently mounted in VeraCrypt. To make sure the a copy job see's that it has been changed, there is a setting in VeraCrypt to insure the date/time of the file is updated when the contents of the container are updated. I don't think the snapshot implementation relies on that.
Sandshark wrote:
If you mean will it be correct if you add a second drive after the VeraCrypt volume has been created, I think it has to be not mounted at the time for proper redundancy.
That sounds wrong to me. Doesn't VeraCrypt creates a file on the NAS that contains the virtual disk? If so, resync will work as it always does (at the physical level, not the file system level). Resync doesn't care if the files on the disk are open or closed.
Sandshark wrote:
To make sure the a copy job see's that it has been changed, there is a setting in VeraCrypt to insure the date/time of the file is updated when the contents of the container are updated. I don't think the snapshot implementation relies on that.
BTRFS snapshots don't depend on the file timestamp. If a block in the VeraCrypt file changes, then the original becomes part of the snapshot, and the new block is only in the main share. The VeraCrypt file in the main share will become fragmented.
If the VeraCrypt file is then defragmented, the blocks that are shared between the main share and the snapshot will end up unshared (duplicated), which will of course decrease the free space on the NAS volume.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
