How to set up secure HTTPS on Synology NAS

Most websites these days use HTTPS and certificates to ensure a secured connection, but the same cannot be said for NAS owners. Since these servers can be accessed through a browser and from anywhere in the world with external access allowed, it’s important to consider enabling HTTPS, even on the best NAS for home. This guide will show you how.

How to set up HTTPS on Synology NAS

It’s possible to use a service like Let’s Encrypt for certification, but you can work with a self-signed option for DSM 7.0, which is more configurable for different scenarios and doesn’t rely on an external service that requires frequent renewal. We’re going to keep things simple here and use Let’s Encrypt.

  1. Log into your Synology NAS.
  2. Go to Control Panel > External Access > DDNS.
  3. Click Add.

    Synology DSM 7.0

    Source: Windows Central

  4. Select Synology from the “Service Provider” drop-down menu.
  5. Enter a desired server name into the “Hostname” field. (This can be used to access the NAS, for example: mynas.synology.me.)
  6. Ensure “Enable Heartbeat” is checked.
  7. Ensure “Get a certificate from Let’s Encrypt” is checked.
  8. Click “Test Connection” to make sure it’s all working.
  9. If everything works, click OK.

The newly added DDNS should be added to the list, and you should see the status set to “Normal”. The certificate from Let’s Encrypt should also be present at Control Panel > Security > Certificate. Visit your NAS using the hostname with port 5001 at the end (example: https://windowscentral.synology.me:5001).

Best value NAS


Synology DS220+

Synology DiskStation DS220+

The best affordable NAS for the home

Synology got mostly everything right with the DiskStation DS220+. It has a really good processor, upgraded DDR4 RAM, two drive bays, and dual 1Gb LAN ports, but it’s just a shame about the lack of 2.5Gb LAN or M.2 slots.

We may earn a commission for purchases using our links. Learn more.

Leave a Reply

Your email address will not be published. Required fields are marked *