× NETGEAR will be terminating ReadyCLOUD service by July 1st, 2023. For more details click here.
Orbi WiFi 7 RBE973
Reply

Re: Certuficate ?!

ivootruse
Aspirant

Certificate ?!

How to generate a new certificate of my ReadyNAS NV+ v2 using Dashboard?

thank you ....
Message 1 of 18
vandermerwe
Master

Re: Certificate

Go to Configure, System, Services. Then I think right click on https (it should already be activated). You should then see something that allows you to verify/change the ip address of the nas for the certificate, and something to regenerate it. This is the way it works in all of the other readynas operating systems so i assume it will be the same for 5.3.9
Message 2 of 18
ivootruse
Aspirant

Certificate

vandermerwe wrote:
Go to Configure, System, Services. Then I think right click on https (it should already be activated). You should then see something that allows you to verify/change the ip address of the nas for the certificate, and something to regenerate it. This is the way it works in all of the other readynas operating systems so i assume it will be the same for 5.3.9


Thanks, but it did. No button to generate a new certificate? Am I wrong thing?

Message 3 of 18
vandermerwe
Master

Re: Certuficate ?!

That is it
Clicking apply will generate the certificate.
Message 4 of 18
vandermerwe
Master

Re: Certuficate ?!

Remember that you will need to delete any other certificates generated by that address from the certificate store before importing the new one.
Message 5 of 18
ivootruse
Aspirant

Re: Certuficate ?!

Nothing happens when pressed. Certificate remains the old IP

Message 6 of 18
vandermerwe
Master

Re: Certuficate ?!

Delete all the certificates that have been generated by the Nas from the browser certificate store first.
Then go to the https settings and click on apply again
Message 7 of 18
vandermerwe
Master

Re: Certuficate ?!

The certificates can be found in Internet Options, Content, Certificates, Trust Root Certification Authority.

Delete all the certificates with the old ip address and the new ip address, then go to the https settings and regenerate the certificate.
Make sure the nas ip is in your trusted sites list (also in Internet Options, Security, Trusted sites.


Then you should be able to import it.
Message 8 of 18
ivootruse
Aspirant

Re: Certuficate ?!

And it did not work.
Message 9 of 18
vandermerwe
Master

Re: Certuficate ?!

Ok.
Let's try again.
Open the browser without connecting to the NAS.
Delete the NAS IP address from the trusted sites list, delete the 192.168.168.168 address and the new address if they are both there.
Delete the certificates from the trusted root certification certificate store, delete those with the 192.168.168.168 address and the new address.
Clear the browser cache.
Add the NAS IP address to the trusted sites list Use https://ipaddressofnas
Restart the browser and connect to the NAS.
Regenerate the certificate.
Clear the browser cache and restart the browser.

When the certificate error appears and you click on the error, what do you see.
Message 10 of 18
vandermerwe
Master

Re: Certuficate ?!

The IP address of the NAS is a little unusual.
Are you connecting to it on your lan?
What is the IP address of your lan gateway and dhcp server?
Message 11 of 18
ivootruse
Aspirant

Re: Certuficate ?!

gateway and dhcp 172.16.196.9
my PC ip 172.16.196.30
PDC 172.16.196.10
NAS is static IP 172.16.196.19
Message 12 of 18
vandermerwe
Master

Re: Certuficate ?!

What is PDC?
Have you tried the steps again as in my second to last post?
Message 13 of 18
ivootruse
Aspirant

Re: Certuficate ?!

Primary Domain Controller
Yes, but the result is the same.
Message 14 of 18
vandermerwe
Master

Re: Certuficate ?!

I have just completed the whole process on my machine.
I am not using a duo v2, but the process is the same.

I acivated dhcp without a dhcp server and the nas got 192.168.168.168.
I generated a key using this address and got a certificate error with this certificate (192.168.168.168)
I installed this certificate after adding that address to trusted sites.

I then changed the network settings in the nas to a fixed ip address 192.168.2.172, changed the setting in the https settings and regenerated the key - I received a confirmation message after about 20 seconds.

Then I closed the browser.

I reopened the browser, deleted the old ip address from trusted sites and deleted the key from Trsuted root certification authority store.

Closed browser again

I reconnected to the nas using the fixed ip address, got the certificate error, added the nas ip to trusted sites again.

I then reconnected to the nas ip, clicked on the certificate error and the correct certificate was there..

It seem your nas is not regenerating the key.

Try rebooting the nas and repeating the process.
Also clear the ssl cache in your browser.

It should work, I helped someone else with the same problem here:

viewtopic.php?f=7&t=72923&hilit=+certificate
Message 15 of 18
Marto731
Aspirant

2 x Certificate articles --IE & OS6

For Forum users with Certificate queries,

Our call centres have created the following help- sheets.

Installing a Certificate on IE for OS6 ReadyNAS http://kb.netgear.com/app/answers/detail/a_id/7002
Installing a Certificate on Google Chrome for OS6 ReadyNAS http://kb.netgear.com/app/answers/detail/a_id/7003


I am open to comments, edits and feedback.
Regards, Marto, 7th March 2014
Message 16 of 18
bastounnet
Aspirant

Re: Certificate ?!

Hi,

I have the same problem on my Duo and the only solution is to contact hotline by email or by phone.
Someone take a remote access to your ReadyNAS after you have added a temporary "Enable SSH support" add-on.
I reported this bug to Netgear for 1 year and Tier 2 support told me that it is to validate a future update.
another embarrassing Bug that I reported, imposible to make backup directory on an imac (not time machine) but I wait the retrun of NETGEAR.
I fear that these two bugs are never fixed because the product is end of life.

best regards

Sebastien
Message 17 of 18
PeteThediver
Aspirant

Re: Certificate ?!

I know this is an old thread but I have been following the instructions and struggling to make it work, but I have figured out why so thought it might be useful to post what happened in case anyone else is also struggling.

Like most things it is simple when you know what is happening, when I was exporting the newly generated certificate the process was being hijacked by my antivirus software (Avast Free) with the effect the cert did not contain the correct info - I found this out by examining the cert file in a text editor to see Avast all over it. Disabling the AV software for a few minutes allowed me to export a correct certificate which I could then import to the certificate store. End of warning messages.

Just use a bit of common sense when doing this, disable the AV software for the shortest time possible, don't do anything else whilst it is disabled, particularly accessing the internet, etc.
Message 18 of 18
Top Contributors
Discussion stats
  • 17 replies
  • 7464 views
  • 0 kudos
  • 5 in conversation
Announcements