My Synology NAS allows the use of SSL to encrypt traffic. The default certificate supplied works, but gives an exception in the browser: There is a problem with this websites security certificate. The problem is the address and the certificate don’t add up. So the solution is to setup your own domain, link it to your NAS and create a certificate for it.
Other parts
Setup DDNS for your NAS
My ISP charges extra for a fixed IP address. To get around this you can setup DDNS, dynamic DNS. Your NAS updates the address it is available on right in the DNS of your domain.
Since godaddy.com does not provide DDNS I’m using namecheap.com.
- Go to the namecheap FreeDNS product and search for your domain.
- Hit search and when it can be hosted at namecheap you can Add DNS Service for Selected Domains. Don’t update the nameservers now!
- Go to the hosted domains and select findmynas.nl to view the details. Use the select authorization email to speed up the process. This is why you should not have updated the nameservers in the previous step, your e-mail would not have worked.
- When the e-mail arrives click the link in it and authorize namecheap to host the domain.
- Now update the nameservers on godaddy.com to
- FREEDNS1.REGISTRAR-SERVERS.COM
- FREEDNS2.REGISTRAR-SERVERS.COM
- FREEDNS3.REGISTRAR-SERVERS.COM
- FREEDNS4.REGISTRAR-SERVERS.COM
(see the changing digit after FREEDNS?)
The godaddy support article Setting Nameservers for Your Domain Names explains the details. - Now you’ll have to wait for the changes to spread all over the internet 😉
- Somewhere in the near future the DNS status will update to active. Go to the hosted domains and select findmynas.nl to view the details.
- Go to the Dynamic DNS settings and enable it. Note the password.
- Go to the All Hosts Records and add a subdomain. This will be the record the NAS updates.
Host Name IP Address/URL Record type synology 127.0.0.1 A (Address) - On your NAS install the DDNS Updater and setup DDNS. Details on synology forum.
Provider http://www.namecheap.com Hostname synology Login findmynas.nl Password ******************** (from Dynamic DNS in namecheap) - Again wait some time as DNS is probably cached at your ISP. Now the NAS is accessible on http://synology.findmynas.nl
- Don’t forget to setup the e-mail fowarding with namecheap.
Note that the used domain FINDMYNAS.NL is not mine and only used for demo purposes because it was available at the time I created this post.
.NET Development by Eric 
Pingback: Resolve certificate error for Synology Diskstation part 3 of 4 | Erictummers's Blog
Pingback: Resolve certificate error for Synology Diskstation part 1 of 4 | Erictummers's Blog
Pingback: Resolve certificate error for Synology Diskstation part 4 of 4 | Erictummers's Blog
This is great! I followed your instructions and it worked perfectly
If my ISP provides fixed IP address, how the process will be ?
If your ip is not dynamic you can just use the A record with the fixed IP address. You don’t need the DNS updater software on your NAS.
Hi Eric, trying to set this up but not sure Namecheap is offering anymore this DDNS service for free, is that correct?
It is called FreeDNS
Thanks Erik, it took me a while to set it all set up! I had to also make sure in Namecheap to get my email forward from my domain, and that wasn’t easy at first. Also on my server, after creating the certificate with StartSSL, I had to change the key headers so to be recognized by my NAS. It seems to be running as in DDNS update in my NAS, the light is green. However when accessing to my page synology.xxxx.com I see nothing so I am still wondering what I am doing wrong 🙂 Do I need to set up something on my router I am thinking? I am a little bit tired from yesterday effort so any pointers is very welcome thanks!
Assign a fixed IP address to your nas on your router.
Setup DMZ on your router for that IP address.
You nas uses port 5001 for DSM over https, make sure to hit https://synology.xxxx.com:5001 😉
that was what I thought and with so many new skills acquired last night, I could not think about the simplest 🙂 thanks again for your guide and your guidance!
Hi Eric, hopefully last question. I don’t really want to setup DMZ for my router and would prefer to find a port forwarding route instead. When setting up your “DDNS Updater” and setup the DDNS, what IP do you use there, the wan ip? or 127.0.0.1?
Port forwarding will work.
The point of DDNS updater is that it handles the changing IP address your nas has. It will be the WAN ip.
got it thanks, yes that’s the whole purpose indeed. Need to check again all my settings see why I cannot access my DSM externally though https://synology.xxxxxx.com:50xx