Resolve certificate error for Synology Diskstation part 2 of 4

My Synology NAS allows the use of SSL to encrypt traffic. The default certificate supplied works, but gives an exception in the browser: There is a problem with this websites security certificate. The problem is the address and the certificate don’t add up. So the solution is to setup your own domain, link it to your NAS and create a certificate for it.

Other parts

Setup DDNS for your NAS

My ISP charges extra for a fixed IP address. To get around this you can setup DDNS, dynamic DNS. Your NAS updates the address it is available on right in the DNS of your domain.

Since does not provide DDNS I’m using

  1. Go to the namecheap FreeDNS product and search for your domain.
    search domain
  2. Hit search and when it can be hosted at namecheap you can Add DNS Service for Selected Domains. Don’t update the nameservers now!
    add selected domain
  3. Go to the hosted domains and select to view the details. Use the select authorization email to speed up the process. This is why you should not have updated the nameservers in the previous step, your e-mail would not have worked.
    modify domain
  4. When the e-mail arrives click the link in it and authorize namecheap to host the domain.
  5. Now update the nameservers on to
    • (see the changing digit after FREEDNS?)
      The godaddy support article Setting Nameservers for Your Domain Names explains the details.

  6. Now you’ll have to wait for the changes to spread all over the internet 😉
  7. Somewhere in the near future the DNS status will update to active. Go to the hosted domains and select to view the details.
  8. Go to the Dynamic DNS settings and enable it. Note the password.
  9. Go to the All Hosts Records and add a subdomain. This will be the record the NAS updates.
    Host Name IP Address/URL Record type
    synology A (Address)
  10. On your NAS install the DDNS Updater and setup DDNS. Details on synology forum.
    Hostname synology
    Password ******************** (from Dynamic DNS in namecheap)
  11. Again wait some time as DNS is probably cached at your ISP. Now the NAS is accessible on
  12. Don’t forget to setup the e-mail fowarding with namecheap.

Note that the used domain FINDMYNAS.NL is not mine and only used for demo purposes because it was available at the time I created this post.

About erictummers

Working in a DevOps team is the best thing that happened to me. I like challenges and sharing the solutions with others. On my blog I’ll mostly post about my work, but expect an occasional home project, productivity tip and tooling review.
This entry was posted in Security and tagged , , , , , , , , . Bookmark the permalink.

14 Responses to Resolve certificate error for Synology Diskstation part 2 of 4

  1. Pingback: Resolve certificate error for Synology Diskstation part 3 of 4 | Erictummers's Blog

  2. Pingback: Resolve certificate error for Synology Diskstation part 1 of 4 | Erictummers's Blog

  3. Pingback: Resolve certificate error for Synology Diskstation part 4 of 4 | Erictummers's Blog

  4. mitomcua says:

    This is great! I followed your instructions and it worked perfectly

  5. Khaled says:

    If my ISP provides fixed IP address, how the process will be ?

  6. Guillaume says:

    Hi Eric, trying to set this up but not sure Namecheap is offering anymore this DDNS service for free, is that correct?

  7. Guillaume says:

    Thanks Erik, it took me a while to set it all set up! I had to also make sure in Namecheap to get my email forward from my domain, and that wasn’t easy at first. Also on my server, after creating the certificate with StartSSL, I had to change the key headers so to be recognized by my NAS. It seems to be running as in DDNS update in my NAS, the light is green. However when accessing to my page I see nothing so I am still wondering what I am doing wrong 🙂 Do I need to set up something on my router I am thinking? I am a little bit tired from yesterday effort so any pointers is very welcome thanks!

  8. Guillaume says:

    that was what I thought and with so many new skills acquired last night, I could not think about the simplest 🙂 thanks again for your guide and your guidance!

  9. Guillaume says:

    Hi Eric, hopefully last question. I don’t really want to setup DMZ for my router and would prefer to find a port forwarding route instead. When setting up your “DDNS Updater” and setup the DDNS, what IP do you use there, the wan ip? or

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.