WORM (Write Once, Read Many) is a data storage technology that only allows data to be written to a storage device once and prevents it from being deleted or modified. Data stored on WORM-compliant storage is immutable. This means that once data has been written to a WORM-compliant storage device, it cannot be modified. This plays a key role when it comes to addressing data security and compliance requirements as well as protecting against ransomware and other attacks.

ADM introduces support for WORM in shared folders on Btrfs volumes which can help add additional protection for important data. Shared folders with WORM enabled can help organizations comply with various data retention regulations and compliance standards to safeguards data from unauthorized access, tampering and malware.

A WORM shared folder set to Governance Mode does not allow modification or deletion of files within the set retention period. Only authorized system administrators have permissions to delete the WORM shared folder, delete the volume a WORM folder resides in or reset the NAS to factory settings. WORM serves as an additional piece of protection for critical data, shielding valuable assets from unauthorized access.

Once a WORM shared folder is set to Compliance Mode, not only are files in that shared folder unable to be modified or deleted within the set retention period, it also bars everyone from deleting that WORM shared folder, the volume it resides in as well as barring everyone from resetting the NAS to factory settings. WORM Compliance mode ensures compliance in industries like finance and healthcare, where immutable data storage is mandated for enhanced security and privacy.

ADM File Manager will display WORM-enabled shared folders with distinctive icons to prevent critical data from unauthorized changes or accidental destruction. This ensures only authorized personnel can access and modify files. WORM will even prevent the system time from being tampered with and shorten the lock time of the WORM shared folder. Once a lock time is set, it can only be extended but not shortened. Volume snapshots containing WORM shared folders cannot be restored to overwrite the original data.

Immutable and appendable modes are supported to lock the files in the WORM shared folders. Files in appendable mode are allowed to append new data at the end of an original file, but data stored originally is not allowed to be changed or deleted. WORM folders already set to immutable mode are also unable to be changed to appendable mode for extra security. Using WORM shared folders also preserves the integrity of important historical documents and records, safeguarding them from any modifications while stored, while still maintaining the flexibility to add new records.

Immutable

Append-only