Table of Contents
Advertisement
Chapter 7 Security Enhancement
Encrypting FTP Transfer Data
You can encrypt passwords using SSH for secure FTP communication. First, open a shared folder's settings; under
"LAN Protocol Support", select the "SFTP" checkbox on the Basic tab and click OK. Also, you have to enable the SFTP
service by moving the SFTP switch to the on position on "File Sharing".
Note: If SFTP is enabled, guest users and anonymous users will not be able to access shared folders.
SSL
SSL (Secure Socket Layer) is a protocol that uses a public key encryption system to establish secure communication
channels between networked devices, allowing for encrypted Internet traffic and server identity verification.
The SSL protocol uses a pair of keys – one private, one public – to authenticate and manage secure connections. SSL
keys are used during setup screen operations and FTP communication.
SSL Key Formats/Extensions
The SSL keys may include the following encoding formats and extensions:
SSL Certificate (server.crt)
The server.crt is the server public key, and is generated by the TeraStation. A computer that receives the server.crt
uses it to encrypt data, and the TeraStation then uses the server.key file to decrypt the data.
In SSL, this key contains the server certificate, and depending on your computer environment, a check may be
performed to determine the trustworthiness of the certificate. The server certificate included in the TeraStation's
default settings was created by Buffalo, and in some cases, the security certificate warning message may appear in
your browser or another security software. If this occurs, disregard the message and continue.
Note: Use TLS 1.2 SSL Certificate.
SSL Private Key (server.key)
This file is the server private key, and it is usually not revealed. The server.key file is paired with the server.crt file to
decrypt data encrypted by the SSL certificate.
Note: The passphrase for the private key must be removed before importing to the TeraStation.
Updating SSL Key Files
To update a server certificate and a private key for SSL, follow this procedure.
1
From Settings, click Management.
2
Click the settings icon (
) to the right of "SSL".
219
Advertisement
Table of Contents
