Buffalo TS5400R0804 [144/176] Server crt ssl certificates

143

Notes:

• To configure access restrictions by IP address, click Services - Edit, then enter the desired settings.

• To use shared folders set for NFS as drives on VMware ESX/ESXi, change the operation mode from "User

Mode" (default setting) to "Kernel Mode" on the screen navigating to Services - Edit.

• If you configure "Guest Permission" to "Forced" on the screen navigating to Services - Edit, user ID and group

ID should be 99 when the data is written from NFS clients; this is recommended for SMB or other protocols as

well. Use "Ignored" if the TeraStation only enables NFS connection.

Encrypting Data Transmission

Encrypting Settings Data

All communication with Settings can use SSL encryption if you access settings through https://.

Encrypting FTP Transfer Data

You can encrypt passwords and files using SSL/TLS for secure FTP communication. First, in the shared folders

settings, select FTP under LAN Protocol Support in Settings. Enable SSL security in the setup screen for your FTP

client. The procedure depends on the FTP client software.

SSL Keys

SSL keys are used during setup screen operations and FTP communication. SSL (Secure Socket Layer) is a type of

encryption system called public key encryption. Generally, SSL is managed by the two files below.

server.crt (SSL Certificates)

The TeraStation sends the file to a computer, and the computer uses it to perform encryption. The TeraStation

receives the encrypted data and uses server.key ( the private key) to decrypt the data.

In SSL, this key contains the server certificate, and depending on your computer environment, a check may be

performed to determine the trustworthiness of the certificate. The server certificate included in the TeraStation in

the default settings was created by Buffalo, and in some cases the message "There is a problem with this website's

security certificate" may be displayed in your browser or other software. Disregard this message and continue.