How To Secure Synology Nas – The new version of DSM 7 contains many features and some of them are more visible to the end user and some are not. The new secure login is one of the advanced and central features that enhances the security of your NAS through the use of a new mobile authentication app.
Security is very important these days, and accessing your NAS from the Internet is always risky, no matter how hard you try to protect it. With this in mind, we have another option that will help us gain more secure access to our device. Enter secure login.
How To Secure Synology Nas
So what is secure entry? This is a one-time security feature that allows you to log in to the NAS without using a password and authenticate through your mobile device instead (with the new Secure SignIn mobile app).
Synology’s Cheapest 2 Bay Nas Is Discounted By More Than 30%
In addition to this, the mobile app also uses your biometric security features (if your device supports them) and adds another layer of protection.
So how does it work? Well, when you get to your home page, you enter your username, this triggers a call event for the mobile app paired with your NAS, and when you allow the connection, you are logged into the NAS. Cool, yeah?
Plus, you can still enable 2FA (two-factor authentication) to make things even more secure. Of course, this is not required, but you have these options. There’s also 2FA if you don’t want to use the new secure login.
Mobile ID versions are available for iOS and Android, so you can use almost any mobile device on which you can install the app as an authenticator.
Synology Secure Signin Apk For Android Download
The app can be used just like any other mobile authentication and accept requests from as many NAS devices as you need.
Secure entry is a bad UPDATE. The following information is taken from Synology’s official webinar for DSM7 held on December 22, 2020:
A. Accept the login and security key features. The easiest way to set them up is to use Synology’s DDNS or QuickConnect, in which case you need to connect to Synology Cloud Services. However, users may choose not to use the offered domain name services.
If users don’t want to use our cloud services, they can still use our features if they can get a free domain for the DSM portal. This requires users to make additional network settings themselves.
Store. Share Sync. Secure. Service. Das Funktionsreiche Nas Betriebssystem. Diskstation Manager
Currently, secure login only works when QuickConnect or DDNS is active. This means that if you plan to connect the NAS to the network and use this feature, you will need to authenticate these two settings.
So why is it bad? Well, not everything is so bad. If you read the second list, you will see that you can use your custom domain to make this work.
This means that in STEP04 (later in the article), the SSI application on your phone will register and use this custom domain name (and port) to access the NAS.
The only downside to this still is that if you are running the NAS on a custom port (AND YOU SHOULD) you will need to open a port on your router. You will still need to do this if you are using DDNS, so it’s not that big of a deal.
A Look At Synology Dsm 7 And Active Insight, The Latest Os For Your Synology Nas Devices
In addition, if you are using a reverse proxy, you can set your public name on port 443/https (for example, https://login.yourdomain.com) and point it to the NAS’s internal IP on the custom port.
In this case, you can access your NAS account using the same https://login.yourdomain.com URL as you access it from a web browser, but when you set up SSI, the wizard will still append to the end configurable DSM port address. your personal domain (the same port that you need to open in your router).
The gist of the story is that you can’t set up SSI to just use https://login.yourdomain.com as the configuration when setting it up, even if you’re using a reverse proxy. The use of the DSM port is supported. NOTE. The login feature usually requires your NAS to have a public IP address, domain address, or QuickConnect ID to avoid login issues when your phone and NAS are in different locations. However, if you are certain that you only need to login to the NAS from the local network, you can use the local domain to handle login acceptance (by registering the NAS’s local IP address with your DNS server).
That said, it’s not bad if you need this or similar LAN access, you can still use 2FA on your mobile device to add a layer of security, but you’ll still need to enter your password first.
Synology Diskstation Ds218play Nas Server On Vimeo
All in all, a great addition, but due to the current use of QC or DDNS, forces the user to open every possible NAS device to access the internet, as well as open any number of ports on the router to enable this. If you have more than one device, you will see a problem with this setting and will probably want to return to the traditional way of using your NAS (for example, VPN to your local network or using a custom domain with two-factor authentication active).
Lest we end on a negative note, I just want to make sure that this feature will be of great benefit to many users, and by no means be overlooked from the vast array of new DSM7 features.
Secure login activation starts (as above) with a valid QC and/or DDNS public address. In the following example, I am using DDNS.
Go to Control Panel > External Access and then the QuickConnect or DDNS tab. Customize them as you wish.
Synology Dsm 7.0 Full Review
As you can see, the configuration and settings are not complicated at all and are completed in a matter of minutes.
Once you’ve enabled it, authentication on your phone is done with a simple push of a button.
Mobile app, quick wizard, and list of NAS devices with active SSI. The last image simulates authorization with SSI
With the DSM 7 Public Beta, Synology has expanded the single sign-on feature, which offers more passwordless sign-in options, as well as more options for two-factor authentication.
Installation Of Tls Certificate On Nas Synology
We now have the option to log in without a password, or still use 2FA if we wish. The great thing is that in addition to the new Secure SignIn mobile app, you can use the hardware option. This includes:
If you select the Hardware Security Key option, you must first authenticate with your DSM password to continue.
Given that I don’t have any USB keys handy, I checked to see if TouchID was telling me that watch unlock was also working.
However, Watch is not supported, so you need to use the correct hardware-implemented TouchID in the native macOS client. Still, a great way to get into the NAS!
Synology: How To Secure Erase Disks
Let me know what you think about secure login in the comments below and whether you use it or not. Also, are there any potential issues you are currently facing with this service and are there any roadblocks for you?
Dsm7 DSM 7 – Update from DSM 6 to a newer version UPDATE 09/12/2020 – Information released by Synology regarding third party application support https://www.synology.com/en-global/knowledgebase/DSM/tutorial/Third_Party/support_Third_Party_packages_beta UPDATE:
Dsm7 DSM 7 – Backup and Restore Settings If I had to point out one thing I love about the DSM7, I’d say it. If you’re in a situation where you need to restore o Let’s be honest for a moment about one of the biggest pros and cons of network storage, namely speed, external security, and the method of accessing your data. Secure yet unrestricted access to data locked on a NAS device from anywhere in the world is good, but often all you need is a quick and easy connection, which is most often found in traditional DAS and USB storage. You want to enjoy the benefits of software, perhaps be able to remotely access, and still share all the great data inside your NAS with multiple users, but you want it to be through a direct connection to the NAS via a single cable without fussing with routers and switches. Add to this the fact that many users are now using connections such as Thunderbolt and 10Gbe, and you will realize that it is indeed desirable to access the NAS in a much more direct way. In today’s article, I’ll show you how to set up a direct, single-cable connection between your NAS drive and a Windows PC. Most of the steps can also be applied to other operating systems such as Linux and Mac, but this guide should show you how to set up a direct connection to your NAS, whether or not you use
How to backup synology nas, synology nas backup to external drive, how to restart synology nas, how to shutdown synology nas, how to host a website on synology nas, how to configure synology nas, how to setup synology nas, how to use synology nas, veeam backup to synology nas, how to reset synology nas, secure synology nas, backup synology nas to backblaze
