How to set up secure HTTPS on Synology NAS

Synology DiskStation DS1621+
Synology DiskStation DS1621+ (Image credit: Rich Edmonds / Windows Central)

Synology DSM 7.0

Source: Windows Central (Image credit: Source: Windows Central)

Most websites these days use HTTPS and certificates to ensure a secured connection, but the same cannot be said for NAS owners. Since these servers can be accessed through a browser and from anywhere in the world with external access allowed, it's important to consider enabling HTTPS, even on the best NAS for home. This guide will show you how.

How to set up HTTPS on Synology NAS

It's possible to use a service like Let's Encrypt for certification, but you can work with a self-signed option for DSM 7.0, which is more configurable for different scenarios and doesn't rely on an external service that requires frequent renewal. We're going to keep things simple here and use Let's Encrypt.

  1. Log into your Synology NAS.
  2. Go to Control Panel > External Access > DDNS.
  3. Click Add.

Synology DSM 7.0

Source: Windows Central (Image credit: Source: Windows Central)
  1. Select Synology from the "Service Provider" drop-down menu.
  2. Enter a desired server name into the "Hostname" field. (This can be used to access the NAS, for example: mynas.synology.me.)
  3. Ensure "Enable Heartbeat" is checked.
  4. Ensure "Get a certificate from Let's Encrypt" is checked.
  5. Click "Test Connection" to make sure it's all working.
  6. If everything works, click OK.

The newly added DDNS should be added to the list, and you should see the status set to "Normal". The certificate from Let's Encrypt should also be present at Control Panel > Security > Certificate. Visit your NAS using the hostname with port 5001 at the end (example:

https://windowscentral.synology.me:5001

).

Rich Edmonds
Senior Editor, PC Build

Rich Edmonds was formerly a Senior Editor of PC hardware at Windows Central, covering everything related to PC components and NAS. He's been involved in technology for more than a decade and knows a thing or two about the magic inside a PC chassis. You can follow him on Twitter at @RichEdmonds.