Synology drive key verification#

Ensure verification of server certificate and server name on the client side.įor openVPN I use self-signed certificates.

Change the VPN server configuration to make authentication with client certificates mandatory.

Generate your own set of certificates using EasyRSA or OpenSSL.

Synology drive key install#

Install Synology VPN server and use openVPN to remotely access your disk station and local network.I changed it to 8080 TCP in order to have the possibility to tunnel through firewalls. The standard port for openVPN is 1193 UDP. I decided for the openVPN protocol, as it will work under Windows and iOS and allows for a flexible configuration of ports, protocol and authentications. Whenever possible, use VPN to access your NAS. Store all critical data (certificates and private keys) on an encrypted memory card.Enable 2-Step Verification for DSM web access.

SSL/TLS – to secure traffic between website and browser (HTTPS).

SSH Secure Shell – for secure login as root user or admin to fully access the (embedded) operating system.

VPN Virtual Private Network – to remotely access the local area home network.

There is a lot of information available in the web yet for me it took some time to identify and understand the most important modifications and to implement them:

Synology drive key how to#

So the question arises, how to mitigate this risk without restricting the remote functionality of the NAS.

This NAS has several server functions, making it convenient to access data remotely, but also making it vulnerable to unauthorized intrusion. If you decide to mount the shared folder (aka unlocking it) then you’ll need to either enter your encryption key that you’ve created in step 8 or import that encryption file that you’ve created.Īnother thing to realize is that if you are syncing this shared folder with something like your online cloud storage (like Google Drive, iCloud, OneDrive, or Amazon), the sync will fail once you unmount it and will start working again the moment you mount it.Recently I bought the network attached storage (NAS) DS1513+ from Synology and integrated it into my home network in order to have a central place to store and access my data. Whenever you unmount a shared folder, it will simply ask you to confirm the request and almost immediately unmount it and lock it up.

Obviously, there’s no need to unmount a folder twice (or mount a folder twice). Usually if it’s mounted, then the mount option will be greyed out, and when its unmounted, then the unmounted button will be greyed out. You can easily mount or unmount your shared folder by highlighting the encrypted folder, clicking on the encryption button above, and then selecting mount or unmount. And when it’s in the unlocked position, Synology has this synonymous with the folder being mounted. Now, when it’s in the locked position, Synology interprets this as being unmounted. If you’ve encrypted your shared folder, then you’ll see a lock icon right in front of it. There’s a few things, you’ll have to understand first. How to mount and unmount your hard drive in Synology If you ever forget your password you’ve created in step 8, then you’ll be able to use the encryption download instead. Once encryption is done, your computer will automatically download the encryption keyĬongradulations, you’ve successfully encrypted your hard drive.