Fix Synology File Station on iOS Devices When the Certificate Is Reported as Invalid

This is what the problem looks like. You can log in to the DiskStation using DS File, but when you try to open a file you get the message: “The certificate for this server is invalid. You might be connecting to a server that is pretending to be XXXXXX, which could put your confidential information at risk.”
This is what the problem looks like. You can log in to the DiskStation using DS File, but when you try to open a file you get the message: “The certificate for this server is invalid. You might be connecting to a server that is pretending to be XXXXXX, which could put your confidential information at risk.”

After Synology’s latest update wave to DSM 4.3 and the new iOS versions of the Apple apps, I could only access the File Station app without HTTPS. I was/am not alone with this problem; several users describe the same issue on synology-forum.de. It may not actually be a bug at all. Previously, it was apparently possible to access File Station via a dynamic DNS address even if the HTTPS certificate had not been issued for that DynDNS address. This has now changed with the new version. In addition, the certificate created on the Synology must now also be imported onto the iOS device. That worked for me, and HTTPS access is working again. The following image gallery shows the individual steps.

At the time of the fix, my DS213+ was running DSM 4.3-3827 and the iOS devices were running DS File 5.0-138.

1. This is what the problem looks like. You can log in to the DiskStation using DS File, but when you try to open a file you get the message: “The certificate for this server is invalid. You might be connecting to a server that is pretending to be XXXXXX, which could put your confidential information at risk.”
1. This is what the problem looks like. You can log in to the DiskStation using DS File, but when you try to open a file you get the message: “The certificate for this server is invalid. You might be connecting to a server that is pretending to be XXXXXX, which could put your confidential information at risk.”
2. What fixed the problem for me was creating a new certificate. To do this, open Control Panel in the DiskStation admin area and then go to the DSM settings.
2. What fixed the problem for me was creating a new certificate. To do this, open Control Panel in the DiskStation admin area and then go to the DSM settings.
3. In the DSM settings, open the “Certificate” tab and select “Create Certificate”.
3. In the DSM settings, open the “Certificate” tab and select “Create Certificate”.
4. On the next screen, select “Create self-signed certificate”.
4. On the next screen, select “Create self-signed certificate”.
5. In the following dialog, all fields must be completed. You can, however, enter placeholder values. The important thing is to choose the longest possible key length.
5. In the following dialog, all fields must be completed. You can, however, enter placeholder values. The important thing is to choose the longest possible key length.
6. This dialog differs only slightly from the previous one, but it is essential. Under “Common Name”, enter the address at which the DiskStation can be reached from the internet – either a fixed IP address or the dynamic DNS address without www or http. If you enter an internal IP address (such as 192.168.0.1), you will only be able to access the data via the app from the internal network. If several addresses route to the DiskStation, they can be entered under “Subject Alternative Name”.
6. This dialog differs only slightly from the previous one, but it is essential. Under “Common Name”, enter the address at which the DiskStation can be reached from the internet – either a fixed IP address or the dynamic DNS address without www or http. If you enter an internal IP address (such as 192.168.0.1), you will only be able to access the data via the app from the internal network. If several addresses route to the DiskStation, they can be entered under “Subject Alternative Name”.
7. The certificate has now been created and can be downloaded under DSM Settings → “Certificate”. This creates a ZIP file, which must be extracted. It contains a file called “ca.crt”. Email this file to the iOS device and open it in Apple’s Mail app.
7. The certificate has now been created and can be downloaded under DSM Settings → “Certificate”. This creates a ZIP file, which must be extracted. It contains a file called “ca.crt”. Email this file to the iOS device and open it in Apple’s Mail app.
8. You are almost done. Tap Install in this dialog.
8. You are almost done. Tap Install in this dialog.
9. After tapping Install once more, access to the DiskStation via DS File and HTTPS should work properly again.
9. After tapping Install once more, access to the DiskStation via DS File and HTTPS should work properly again.
Categories: Life Hacks, Technology
Tags: , , , , , , , ,
Michael Höpfl

Written by:Michael Höpfl All posts by the author

Ich schreibe und poste hier zu Themen, die mich seit jeher privat als auch beruflich interessieren und begleiten. [Mehr über mich]

You may also like

Search: