Forum Discussion

Star

Dec 24, 2017

Why encryption if there's already permissions?

Hi, I'm wondering why would I add encryption on a volume of a ReadyNAS RN214. What advantages would it give me? I did not check the recovery for admin password https://kb.netgear.com/22784/How-d...

Other Discussions

Sandshark

Sensei

Dec 24, 2017

For most, there is very little use for it. Since you need the USB key hand any time the NAS is rebooted, you are likely to keep it close to the NAS, or even in the USB port. So a thief will get your key when he gets your NAS. You can only hope he doesn't realize they go together.

Encryption also limits your expansion options.

If you have personal data you want encrypted, the use of VeraCrypt volumes on the NAS is probably more useful for the average user.

Now, if a business has highly proprietary or HIPA data on the drive, then encrypting could be of use because it would preent any possible recovery of the data, even from a failed drive removed from the NAS.

Zurd
Star
Dec 25, 2017
Ok I understand how the encryption works on the ReadyNAS now. It's not bad but like you said, you'll need a USB key near at all times in case there's a reboot (blackout, firmware upgrade).

VeraCrypt would be better and I'm already using it on an external hard drive so I know a bit how it works but I don't find any information on how to use it with a ReadyNAS volume. I cannot mount the ReadyNAS in VeraCrypt. Know how I can achieve this?
- Sandshark
  Sensei
  Dec 26, 2017
  The best way to use VeraCrypt with the ReadyNAS is toi run the program on your PC and just put the container on the NAS just like you would on an external drive. It is probably possible to install a Linux version of VeraCrypt on the NAS, but that's likely a lot more trouble with few additional capabilities.
  - StephenB
    Guru - Experienced User
    Dec 27, 2017
    Sandshark wrote:
    
    The best way to use VeraCrypt with the ReadyNAS is toi run the program on your PC and just put the container on the NAS just like you would on an external drive.
    
    Yes. The encryption is only known by the PC, and the encrypted data isn't on the PC, but on the NAS. Both devices are needed to access the encrypted data.
    
    There are some similar options, including using Microsoft VHDs.
    
    The downside is that these approaches are usually designed for single user acess. Another factor is that if the NAS is only providing block storage, these volumes are difficult to back up. ReadyDR should work efficiently, but the other backup protocols in the NAS will back up the entire volume when it changes.