kmip-server-dsm VS revaulter

But with a 10 year old Synology I'm not sure. As KMIP Server I used this one https://github.com/rnurgaliyev/kmip-server-dsm

Let's look at what we have here: https://github.com/rnurgaliyev/kmip-server-dsm

At least on https://github.com/rnurgaliyev/kmip-server-dsm, the key entry is not encrypted, so when /usr/syno/bin/synokmip --get_with_name is called, the last key entry is returned unmodified.

Many people already tested an comfirmed that this github project (https://github.com/rnurgaliyev/kmip-server-dsm) was working with first beta, not working with RC any more and not working with final release. Observation: KMIP server is connected and green, but automatic decryption / mounting is not possible after reboot.

I've tried both using the RPi method (via https://github.com/rnurgaliyev/kmip-server-dsm), which I was able to get my 1522+ to connect to and looking at the logs I see it communicating with the KMIP server, however it wasn't able to unlock the volume on a reboot. This had an interesting side effect, and in a way is the solution we all want, because since it couldn't get the key from the KMIP server, I had to upload the key to unlock the volume.

Tried this? https://github.com/rnurgaliyev/kmip-server-dsm

Hey guys, I was playing with PyKMIP a bit and ended up creating a working KMIP server in a container. So far it works well with 7.2 Beta, but of course, more testing is needed. Check this out, maybe it will be useful for anybody. There is also a small guide on how to set it up nicely on Raspberry Pi. https://github.com/rnurgaliyev/kmip-server-dsm

For unlock, I use this app I wrote: Revaulter. The keys are stored locally but wrapped (ie “encrypted”) with a key stored on Azure Key Vault. When the server boots up it sends me a notification to sign in (using my Azure AD account, with MFA) and approve the request to unwrap (ie “decrypt”) which unlocks the disks.