Which Synology NAS models support volume encryption?
Which Synology NAS models support volume encryption?
Details
Encrypting a volume is an effective way to protect data at rest from unauthorized access in case your storage drives are lost or stolen. When a volume is encrypted, all data within it, including shared folders, LUNs, and package data, are secured using an encryption key.
Prerequisites
- Your Synology NAS must be running DSM 7.2 or above.
- The Encryption Key Vault must be enabled to store encrypted volumes' encryption keys.1 The vault can be set on:
- Local Synology NAS
- Remote Synology NAS via the Key Management Interoperability Protocol (KMIP)2
For more information, refer to the Create a Volume article.
Applied Models
The following table lists the Synology NAS models that support volume encryption.3
Series |
Models |
|---|---|
FS-series |
FS6400, FS3600, FS3410, FS3400, FS2500, FS2017, FS1018 |
HD-series |
HD6500 |
SA-series |
SA6400, SA3610, SA3600, SA3410, SA3400, SA3400D, SA3200D |
25-series |
DS925+ |
24-series |
DS224+ |
23-series |
RS2423RP+, RS2423+, DS1823xs+, DS923+, DS723+, DS423+ |
22-series |
RS822RP+, RS822+, RS422+, DS3622xs+, DS2422+, DS1522+ |
21-series |
RS4021xs+, RS3621xs+, RS3621RPxs, RS2821RP+, RS2421RP+, RS2421+, RS1221RP+, RS1221+, DS1821+, DS1621xs+, DS1621+ |
20-series |
RS820RP+, RS820+, DS1520+, DS920+, DS720+, DS620slim, DS420+, DS220+ |
Notes:
- If the system can access the vault at startup, it will use the stored keys to unlock the encrypted volumes. However, if the vault is unavailable, such as when the KMIP server containing the vault is disconnected, the encrypted volumes will become locked and its data inaccessible.
- To request support for other KMIP servers, you can submit a Feature Inquiry form.
- Certain models may not be available in your location. Contact your local distributors for more information.