This brings us to certificate configuration, which is available under Control Panel > Security > Certificate. Synology DSM allows you to import an existing certificate, create a self-signed one, or request a free certificate from Let’s Encrypt. The latter is often the simplest and most secure option if your NAS is reachable from the internet. Assign the certificate to the DSM interface to ensure secure browser recognition.
Another critical step is enforcing HTTPS by automatically redirecting all HTTP traffic. This can be done by checking the box for “Automatically redirect HTTP connections to HTTPS” in the DSM settings. Additionally, administrators may use the built-in firewall to block unencrypted HTTP traffic completely, further reducing security risks.