How to Generate a CSR on Synology NAS

In this tutorial, we will show you how to generate a CSR on Synology NAS.

Just follow the steps below:

Step 1: Make sure you are following the requirements

You can generate the CSR directly from your Synology account, but first, make sure you meet to following requirements:

• You need to set up a DDNS (Dynamic DNS) to configure your Synology SSL certificate. Here’s the official Synology documentation on the DDNS configuration
• You need to point your registered domain to your DDNS by creating a CNAME record. Here are the official instructions (the 4.1 section)

After you take care of the above prerequisites, you can continue with the CSR generation.

Step 2: Create the CSR

1. Sign in to your Synology NAS account and go to Control Panel> Security
2. On the top menu, select Certificate, and then click on the CSR tab
3. From the Create Certificate page, select Create Certificate Signing Request (CSR) and click Next

Step 3: Enter your information

Now, you need to fill in the fields with the following details:

• Private Key Length: from the drop-down menu select 2048,
• Common name: specify the fully qualified domain name (FQDN) of the website you want to secure. For example, yourwebsiste.com
  Note: If you have a Wildcard certificate, include an asterisk in front of your domain name. For example, *.yourwebsite.com.
• Email: provide a valid email address
• Country: select your country from the drop-down list. For Business and Extended Validation certificates, specify the country where your company is officially registered. For example, US
• State/Province: enter the state of residence, or where your company is located. For instance, Florida
• City: submit yours, or your company’s city of residence. For example, Orlando
• Organization: enter the official name of your organization. If you have a Domain Validation certificate write NA
• Department: specify the department managing your SSL Certificate. Usually, it is IT or Web Administration. For DV certs, type NA

Double-check all the fields you’ve just completed, and then click Next

Step 4: Save the CSR files

On the next page, Synology will generate and download a ZIP archive on your PC with the following files:

• csr – your CSR code, required for the SSL activation
• key – your private key, necessary for SSL installation

Now you can submit the CSR code during your SSL certificate buying order, and wait for the CA to approve your request

After your CA validates the CSR and issues the SSL certificate, you can proceed to the Synology NAS SSL installation instructions.