Encryption if server is stolen

[Amplificator]

Am I correct in understanding that if I choose to use the built-in encryption in FreeNAS 11.3U4.1 (currently the latest) that the key is saved on the boot drive?

So what protects my data if the server is stolen?

 

[danb35]

The passphrase you've set on the key.

 

[Samuel Tai]

No passphrase on the key for pool hosting the system dataset, sorry.

 

[danb35]

Well, yes, that's a problem--the .system dataset would need to be somewhere else.

 

[Amplificator]

So there's nothing stopping a thief from turning on the machine and accessing everything, if stolen?

 

[danb35]

So there's nothing stopping a thief from turning on the machine and accessing everything, if stolen?

Um, the passphrase you set on the key? Yes, that requires you have somewhere else to put your .system dataset.