Chapter 7 Security Enhancement
Encrypting Data Transmission
Encrypting Settings Data
All communication with Settings can use SSL encryption if you access the Settings page by changing "http://" to
"https://" in the browser address bar or click Secure Connection from the login window. Once you are logged in using
the HTTPS connection and wish to disable SSL encryption, click Normal Connection from the login window.
Encrypting FTP Transfer Data
You can encrypt passwords using SSH for secure FTP communication. First, open a shared folder's settings; under
"LAN Protocol Support", select the "SFTP" checkbox on the Basic tab and click OK. Also, you have to enable the SFTP
service by moving the SFTP switch to the on position on "File Sharing".
SSL
SSL (Secure Socket Layer) is a protocol that uses a public key encryption system to establish secure communication
channels between networked devices, allowing for encrypted Internet traffic and server identity verification.
The SSL protocol uses a pair of keys – one private, one public – to authenticate and manage secure connections. SSL
keys are used during setup screen operations and FTP communication.
SSL Key Formats/Extensions
The SSL keys may include the following encoding formats and extensions:
SSL Certificate (server.crt)
The server.crt is the server public key, and is generated by the TeraStation. A computer that receives the server.crt
uses it to encrypt data, and the TeraStation then uses the server.key file to decrypt the data.
In SSL, this key contains the server certificate, and depending on your computer environment, a check may be
performed to determine the trustworthiness of the certificate. The server certificate included in the TeraStation's
default settings was created by Buffalo, and in some cases, the security certificate warning message may appear in
your browser or another security software. If this occurs, disregard the message and continue.
204