Encrypting Data Transmission; Encrypting Settings Data; Encrypting Ftp Transfer Data; Ssl Keys - Buffalo TeraStation 1000 User Manual

• To restrict access to a NFS share for specific clients, navigate to File Sharing - NFS - NFS Rules and click Add
Rule. Choose the folder to restrict access to, and enter the clients that will have restricted access in the "Hosts"
field. Clients may be entered by hostname, IP address, or IP address range. Wildcards are supported. Separate
multiple entries with commas. You may assign read-only or read & write access to the listed clients. Rules
override settings made from the Services tab.

Encrypting Data Transmission

Encrypting Settings Data

All communication with Settings can use SSL encryption if you access settings through https://.

Encrypting FTP Transfer Data

You can encrypt passwords and files using SSL/TLS for secure FTP communication. First, open a shared folder's
settings and click Edit; under "LAN Protocol Support", check FTP and click OK. Enable SSL security in the setup screen
for your FTP client. The procedure depends on the FTP client software.

SSL Keys

SSL keys are used during setup screen operations and FTP communication. SSL (Secure Socket Layer) is a type of
encryption system called public key encryption. Generally, SSL is managed by the two files below.
server.crt (SSL Certificates)
The TeraStation sends the file to a computer, and the computer uses it to perform encryption. The TeraStation
receives the encrypted data and uses server.key ( the private key) to decrypt the data.
In SSL, this key contains the server certificate, and depending on your computer environment, a check may be
performed to determine the trustworthiness of the certificate. The server certificate included in the TeraStation in
the default settings was created by Buffalo, and in some cases the message "There is a problem with this website's
security certificate" may be displayed in your browser or other software. Disregard this message and continue.
server.key (SSL Key)
This file is used as a pair with server.crt (server certificate). This is required for decrypting the data that was
encrypted by the server certificate, and this is normally not revealed.
Updating SSL Key
To update a server certificate and a private key for SSL, follow this procedure.
1
Navigate to Management - SSL.
2
Register "server.key" for "Secret Key" and "server.crt" for "Server Certificate (.crt)", then click Import.
71