They also have this weird full disk encryption that doesn't validate that the boot partition is compromised, allowing exploits like this: https://forums.spacere

They also have this weird full disk encryption that doesn't validate that the boot partition is compromised, allowing exploits like this: https://forums.spacerex.co/t/bounty-first-person-to-share-how-to-break-into-dsm-7-2-encryption-keys-stored-on-box-gets-a-ds923/641/7 https://forums.spacerex.co/t/bounty-first-person-to-share-ho... This breaks both the 'store key locally' and the KMIP setup. And for their file-based encryption you cannot change the password. You need to create a new folder with a new password and copy all files over.