70
E nc ry ption V e rific a tion
To verify the disk volume is encrypted, login to the NAS as an administrator. Go to
"Storage Manager" > "Volume Management". You will be able to see the encrypted disk
volume, with a lock icon in the Status column. The lock will be open if the encrypted
volume has been unlocked. A disk volume without the lock icon in the Status column is
not encrypted.
B e ha v ior of E nc ry pte d V olum e s upon Sy s te m Re boot
In this example, we have two encrypted disk volumes on the NAS.
The first volume (Single Disk Drive 1) has been created with the option "Save
Encryption Key" disabled.
The second volume (Single Disk Drive 4) has been created with the option "Save
Encryption Key" enabled.
After restarting the NAS, check the volume status. The first drive has been unlocked and
mounted but the second drive is locked. Since the encryption key is not saved on the
second disk volume, you have to manually enter the encryption password to unlock it.
Saving the key on the NAS will protect you only if your hard drives are stolen.
However, there is a risk of data breach if the entire NAS is stolen as the data is
accessible after restarting the NAS.
If you do not save the encryption key on the NAS, your NAS will be protected
against data breach even if the entire NAS were stolen. The disadvantage is that
you have to unlock the disk volume manually on each system restart.
E nc ry ption Ke y M a na ge m e nt
To manage encryption key settings, login to the NAS as an administrator and go to
Storage Manager" > "Encrypted File System".
There are four options to manage the encryption key:
Change the encryption key: Input your old encryption password and input the new
password. (After the password is changed, any previously exported keys will not
work. You must download the new encryption key if necessary.)
Download Encryption Key File: Input the encryption password to download the
encryption key file. Downloading the encryption key file will allow you to save the
encryption key in a file. The file is also encrypted and can be used to unlock a
