Arch Linux

mark2048

Member

Registered: 2014-03-13

Posts: 5

Encrypted RAID1

Hello,
I got 2 Samsung 840 EVO ssds, which supports hardware AES encryption enabled by the motherboard's bios password.

I want to put them on a software raid1 using mdadm, so i will get an virtual drive called /dev/md1.
I want to software-encrypt the /dev/md1 using luks + lvm.
Until now, the scheme would look like this:

Now, my problem is that i want to use also the hardware encryption, and i don't know if it will affect my raid,
how it will work, and in case of failure, the raid can be restored.
Where should the hardware encryption layer fit in that picture ?
Thanks.

Rob_H

Member

Registered: 2012-06-19

Posts: 72

Re: Encrypted RAID1

If you're not already using the hardware encryption, it certainly will affect your existing RAID. You'd need to start over. Once you do, though, it should be transparent to all of the layers in your picture.

mark2048

Member

Registered: 2014-03-13

Posts: 5

Re: Encrypted RAID1

I don't have already an raid, i want to make a new setup.
Ok so there should not be any problems. Thanks for your answer.

jasonwryan

Anarchist

From: .nz

Registered: 2009-05-09

Posts: 30,424

Website

Re: Encrypted RAID1

That image looks oddly familiar...

Please remember to mark your thread as [Solved] by editing your first post and prepending it to the title.

---

Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

frostschutz

Member

Registered: 2013-11-15

Posts: 1,474

Re: Encrypted RAID1

The hardware encryption should be entirely transparent to the OS, so you'd not even notice it's there. I guess the bios would ask you for the passwords for those disks. So, nothing would change in your image.

Be careful to not lock yourself out, e.g. hdparm sometimes lets you set a longer password than the bios supports and then you're in trouble if you can't get it unlocked/unfreezed again.

Last edited by frostschutz (2014-09-01 18:39:29)