Dear all,
Sorry if this question is a bit n00b'ish. I'm new to FreeNAS. I did read the FreeNAS docs about managing encrypted volumens, but I didn't quite wrap my head around it.
I would like to build a NAS, and I need encryption for data at rest, as the NAS contains customer data. It's a small NAS with about 2TB capacity for a small single-person home office.
I know my way around Trusted Platform Modules (TPMs) and self-encrypting drives (SED). Thus I could build a NAS which handles my encryption needs via a TPM & SEDs. This would be OS-agnostic, i.e. FreeNAS wouldn't need to do anything special.
FreeNAS has encryption built in, which I could use instead. First off, I assume that after every reboot or power cycling, the passphrase must be entered to mount the encrypted volume, to guard against theft of the entire unit. Is that assumption correct?
Next, is there a general recommendation about how to secure data at rest with FreeNAS, i.e. which solution is most commonly used and recommended?
Thank you very much! :)
Sorry if this question is a bit n00b'ish. I'm new to FreeNAS. I did read the FreeNAS docs about managing encrypted volumens, but I didn't quite wrap my head around it.
I would like to build a NAS, and I need encryption for data at rest, as the NAS contains customer data. It's a small NAS with about 2TB capacity for a small single-person home office.
I know my way around Trusted Platform Modules (TPMs) and self-encrypting drives (SED). Thus I could build a NAS which handles my encryption needs via a TPM & SEDs. This would be OS-agnostic, i.e. FreeNAS wouldn't need to do anything special.
FreeNAS has encryption built in, which I could use instead. First off, I assume that after every reboot or power cycling, the passphrase must be entered to mount the encrypted volume, to guard against theft of the entire unit. Is that assumption correct?
Next, is there a general recommendation about how to secure data at rest with FreeNAS, i.e. which solution is most commonly used and recommended?
Thank you very much! :)