For full disk encryption you need DSM >= 7.2 and you can either, store it locally (useless) or in a KMIP server. [0]

As a KMIP server you use:

  - Another Synology NAS with DSM >= 7.2
  - A KMIP compatible key server

Except for the demo implementation that Synology uses (PyKMIP), all the KMIP compatible servers I've found have licenses in the tens of thousands a year. So if anybody has any suggestions to substitute PyKMIP...

  0: https://kb.synology.com/en-global/DSM/tutorial/Which_models_support_encrypted_volumes

▲ 8fingerlouie 5 days ago | parent [-]

I remembered wrong. I’m fairly certain that Synology, at some point, allowed you to store the encryption vault on an external (USB) drive, but apparently not anymore.

	▲	MobileVet 5 days ago \| parent [-]
		You didn't remember wrong, I have mine stored on an external drive. I am using DS 6.x though