How to Create a CSR on Synology NAS?

What is a Certificate Signing Request?

A CSR is an encoded text or message that you send to a certificate authority when you want to get a digital certificate such as SSL/TLS cert to shield your site.

The certificate authority needs this encoded text to verify that you are – “who you say you are!” Once the Certificate Authority successfully authenticates that the info mentioned in the CSR is correct, the CA issues the SSL cert.

A CSR includes important data or information such as:

• Info regarding organization’s online presence
• Domain name
• Public key
• Signature, and much more.

How to Create or Generate a CSR on Synology NAS?

There are four steps that needs to be executed in order to create a CSR on Synology NAS:

Step 1: – Set up a Dynamic DNS & register domain to it

Step 2: – Create the CSR

Step 3: – Enter the info

Step 4: – Save the CSR file

Let’s explore these 4 steps in detail.

Step 1: – Set up a Dynamic DNS & register domain to it

To directly generate CSR from the Synology account first set up a dynamic DNS (DDNS) in order to configure the Synology SSL certificate. Once done, point the registered domain to your DDNS by creating a CNAME record.

Step 2: – Create the CSR

Follow the steps mentioned below to create the CSR:

• Use your credentials to log into the Synology NAS account.
• Navigate to Control Panel > Security.
• The Create Certificate page will appear.
• On the Create Certificate page, select Create Certificate Signing Request (CSR).
• Click Next.

Step 3: – Enter the Info

Follow the steps mentioned below to enter the info:

• From the Private Key Length list, select 2048.
• In the Common name field, type the Fully Qualified Domain Name of the site.
• In the Email field, type the official email address.
• From the Country list, select the country where the organization is located.
• In the State/Province filed, type the state name where the organization is located.
• In the City filed, type the city name where the organization is located.
• In the Organization filed, type the official organization name.
• In the Department filed, type the department managing the SSL cert.
• Verify all the field.
• Click Next.

Step 4: – Save the CSR file

Follow the steps mentioned below to save the CSR file:

• Verify that a .zip file has been downloaded on the system.
• The .zip file should contain these two files:
  • CSR code needed for SSL activation.
  • Private key file needed for SSL installation.

Now, submit the CSR code on the enrollment page. Wait it to be approved by the Certificate Authority. Once CA validates CSR, they will issue your SSL Certificate, then you can proceed with SSL Installation on Synology NAS Server.