Buffalo TeraStation 3010, User Manual

Page: 178 / 229

177
Chapter 7 Advanced Features
Encrypting Data Transmission
Encrypting Settings Data
All communication with Settings can use SSL encryption if you access the Settings page by changing “http://” to
“https://” in the browser address bar or click
Secure Connection from the login window. Once you are logged in using
the HTTPS connection and wish to disable SSL encryption, click Normal Connection from the login window.
Encrypting FTP Transfer Data
You can encrypt passwords using SSH for secure FTP communication. First, open a shared folder’s settings; under
“LAN Protocol Support”, select the “SFTP” checkbox on the
Basic tab and click OK . Also, you have to enable the SFTP
service by moving the SFTP switch to the on position on “File Sharing”.
SSL Keys
SSL keys are used during setup screen operations and FTP communication. SSL (Secure Socket Layer) is a type of
encryption system called public key encryption. Generally, SSL is managed by the two files below.
server.crt (SSL Certificates)
The TeraStation sends the file to a computer, and the computer uses it to perform encryption. The TeraStation
receives the encrypted data and uses server.key (the private key) to decrypt the data.
In SSL, this key contains the server certificate, and depending on your computer environment, a check may be
performed to determine the trustworthiness of the certificate. The server certificate included in the TeraStation’s
default settings was created by Buffalo, and in some cases, the security certificate warning message may appear in
your browser or another security software. Disregard this message and continue.
Note:
Use TLS 1.2 SSL Certificate.
server.key (SSL Private Key)
This file is used as a pair with server.crt (server certificate). This is required for decrypting the data that was
encrypted by the server certificate, and this is normally not revealed.
Note:
The passphrase for the private key must be removed before importing to the TeraStation.
Updating SSL Key Files
To update a server certificate and a private key for SSL, follow this procedure.
1
From Settings, click Management .
2
Click SSL .
3
Register “server.key” for “Secret Key” and “server.crt” for “Server Certificate (.crt)”, then click Import .
Notes:
• Place the SSL key files (server.key, server.crt) directly below the C root drive. The SSL key files may be unable to be
updated if it is placed in folders or paths that contain multibyte characters.
• If Settings cannot be displayed after updating, initialize the TeraStation settings.
• Updating the firmware initializes an SSL key.