NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Encryption of shared folders for users (?) - is this possible?
Hi, i have an RN316 - for home use currently.
i've search in the community and have seen a few posts on people requesting about encryption however have found very little to suggest encryption is even on the feature table of @netgear @readynas
I am looking for a way that i can have family members upload files into my NAS and have this encrypted so that only they can see and not even the administrators like myself would see.
1. Is this feature possible (for someone like myself who has limited if not zero - NAS/ security/ programming know)?
2. is this a feature on ReadyNAS maybe not aware of?
Curious how this could be done with any addons/ plugins or native feature?
i'm not looking to encrypt the entire disk, just folders that i create, shared to them, and which they own completely....
thank you!
Whole drive encryption won't do what you want, because the system will decrypt the files on the drive before sending them over the network.
If part of the idea is to automatically sync the dropbox to an encrypted folder on the NAS, then there are some caveats. I believe the NAS can only sync to a single dropbox account. Also, the methods suggested above all require the encryption to be done on the client PC. It can't be done by dropbox or the NAS itself, since neither would know the encryption key. If the NAS did know the encryption key, then the administrator could access the data.
An alternative is to just tell everyone that anything they want to keep truly private needs to be stored in an encrypted zip file, using the password of their choice. That also protects the files from dropbox hackers. Other files that aren't sensitive could be stored in the usual way.
8 Replies
Replies have been turned off for this discussion
I would recommend the home folders.
Home folders allow each user to have a private folder matching his or her account name. Home folders can be made available over SMB, AFP, NFS and FTP protocols. SMB, AFP and NFS are enabled by default. This folder will only be accessible to the user and the admin account.
You might want to check this article regarding share permissions
Other community members might suggest other Apps or procedures.
Regards
Thanks for the idea, however the HOME user folder is something i have considered. The fact the ADMIN root can still read the data is an issue.
That would be similar to just create a share folder and only giving a single person access.
Am looking for a way to even lock the root user out of the files/ folder - only way i have thought of this working was by having it encrypted?
iSCSI Luns are opaque to the NAS, so you could use those. I believe they can also be encrypted in the client (though I haven't tried to set the up). Veracrypt and encrypted Microsoft VHDs are similar (and both containers can be stored on the NAS).
The issue with all three is that they can only be accessed from one device at a time.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
