Does anyone know where the cloud credentials are stored, and if they are stored as plain text or as hashed values?
The reason is that TrueNAS has an immense problem with encryption at rest, as has been described in this thread:
www.truenas.com
The goal is installing TrueNAS on a 12-bay server but it probably also needs an additional SSD for the system dataset if the main pools are to be encrypted with a passphrase. If the Cloud Credentials are saved in plaintext on such SSD, it would mean an even bigger security risk as already explained in the linked thread.
The reason is that TrueNAS has an immense problem with encryption at rest, as has been described in this thread:
Encryption of data at rest
I would like to ask some questions. 1) What is the point of disk encryption without a password? In case the storage server gets stolen as a whole, it just needs to be turned on to reveal all data to the thief. I know that there is an option to add a passphrase to the encryption of a pool...
www.truenas.com
The goal is installing TrueNAS on a 12-bay server but it probably also needs an additional SSD for the system dataset if the main pools are to be encrypted with a passphrase. If the Cloud Credentials are saved in plaintext on such SSD, it would mean an even bigger security risk as already explained in the linked thread.