ASUSTOR - Website Management

Date:

Topic_id:

Subject:

Description:

content:

<h4><strong>COURSE OBJECTIVES</strong></h4>
<p><span style="line-height: 1.5;">Upon completion of this course you should be able to:</span></p>
<ol>
<li>Generate paired SSH keys for different administrator accounts on the ASUSTOR NAS.</li>
<li>Use SSH keys to sign into an ASUSTOR NAS on Windows, macOS, and Linux.</li>
</ol>
<br />
<h4><strong>PREREQUISITES</strong></h4>
<p><span style="line-height: 1.5;"><strong><i>Course Prerequisites:</i></strong></span></p>
<p><span style="line-height: 1.5;">None</span></p>
<p><span style="line-height: 1.5;"><strong><i>Students are expected to have a working knowledge of:</i></strong></span></p>
<p><span style="line-height: 1.5;">SSH</span></p>
<br />
<h4><strong>OUTLINE</strong></h4>
<p><a href="#sk1">1. Introducing SSH Keys</a></p>
<p><a href="#sk2">2. Adding an SSH key to your ASUSTOR NAS</a></p>
<p><a href="#sk3">3. Using an SSH key to sign in to an ASUSTOR NAS</a></p>
<br /><br /><hr /><br />
<h4><strong><a name="sk1"></a>1. Introducing SSH Keys</strong></h4>
<p><span style="line-height: 1.5;">Logging into an ASUSTOR NAS using SSH means you can exercise full control over your NAS and operate more advanced functions. Enabling SSH keys can improve the security of using SSH while also making it more convenient. SSH keys replace passwords and are much more secure than passwords. Generate different keys for different administrator accounts and save the private keys in an SSH client while disable password authentication, greatly improving the security of SSH connections.</span></p>
<p><span style="line-height: 1.5;"><span class="glyphicon glyphicon-info-sign"></span> Introduced in ADM 5.0.</span></p>
<br /><br /><br />
<h4><strong><a name="sk2"></a>2. Adding an SSH key to your ASUSTOR NAS</strong></h4>
<p><span style="line-height: 1.5;">To login SSH with private keys, you MUST enable SSH service.</span></p>
<br />
<ul>
<li>Using your Web browser, log in to ADM using an administrator account.</li>
<li>Select [Services] <span class="glyphicon glyphicon-arrow-right"></span> [Terminal] <span class="glyphicon glyphicon-arrow-right"></span> [SSH].</li>
<li>Select [Enable SSH Service] and click on [Apply].</li>
</ul>
<p style="padding-left: 20px;"><span style="line-height: 1.5;"><span class="glyphicon glyphicon-exclamation-sign"></span> When enabling SSH, it is recommended to avoid using the default port.</span></p>
<br />
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321155813_ADM_services_terminal_ssh.png" alt="" width="880" height="528" title="" align="" /></p>
<br />
<ul>
<li>Select [Services] <span class="glyphicon glyphicon-arrow-right"></span> [Terminal] <span class="glyphicon glyphicon-arrow-right"></span> [SSH Keys].</li>
<li>Select a system administrator to create an SSH key, and click [Add].</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321165217_ADM_services_terminal_ssh_keys_s1.png" alt="" width="880" height="528" title="" align="" /></p>
<br />
<ul>
<li>Choose an administrator account to take possession of a created SSH key.</li>
<li>Change the key name if needed.</li>
<li>Open the pulldown menu to select the private key format for download.</li>
<li>Click [OK] and then ADM will generate a paired key and prompt you to download the required private key.
<p><span style="line-height: 1.5;"><span class="glyphicon glyphicon-info-sign"></span> Note: </span></p>
<ul>
<li>Different SSH clients will use different private key formats, please choose to download the required private key format.</li>
<li>Please keep the private key properly. Once lost, please log in to the NAS to regenerate new public and private keys.</li>
</ul>
</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321165306_ADM_services_terminal_ssh_keys_s2.png" alt="" width="600" height="358" title="" align="" /></p>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321165326_ADM_services_terminal_ssh_keys_s3.png" alt="" width="600" height="358" title="" align="" /></p>
<br />
<ul>
<li>A created key is enabled by default. You can now use an SSH private key to connect to your NAS.</li>
<li>A key can be disabled or deleted here. The paired private key of a disabled or deleted key will become invalid and cannot be used.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321165348_ADM_services_terminal_ssh_keys_s4.png" alt="" width="880" height="528" title="" align="" /></p>
<br />
<ul>
<li>You can choose to disable the password authentication for different administrators accounts here.</li>
</ul>
<p style="padding-left: 20px;"><span style="line-height: 1.5;"><span class="glyphicon glyphicon-exclamation-sign"></span> Disabling password authentication will not allow the user to login SSH with password anymore, including encrypted transmission via SSH in Remote Sync.</span></p>
<br />
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321165403_ADM_services_terminal_ssh_keys_s5.png" alt="" width="880" height="528" title="" align="" /></p>
<br /><br /><br />
<h4><strong><a name="sk3"></a>3. Using an SSH key to sign in to an ASUSTOR NAS</strong></h4>
<p><span style="line-height: 1.5;">Different client software may require different SSH key formats. There are 4 types of SSH private key formats downloaded from an ASUSTOR NAS: These are in the file formats of .ppk, .pem .key or the file name starts with the prefix of id_.</span></p>
<p><span style="line-height: 1.5;">Please copy the required private key file to the appropriate folder to save and use it.</span></p>
<br />
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321165737_downloaded_private_ssh_keys.png" alt="" title="" align="" width="650" height="204" /></p>
<br />
<div class="panel-group" id="accordion" role="tablist" aria-multiselectable="true">
<div class="panel panel-default">
<div class="panel-heading" role="tab" id="heading1">
<h4 class="panel-title"><a role="button" data-toggle="collapse" data-parent="#accordion" href="#collapse1" aria-expanded="true" aria-controls="collapse1"><i class="more-less glyphicon icofont-rounded-down"></i> On Windows, PuTTY is used as an example.</a></h4>
</div>
<div id="collapse1" class="panel-collapse collapse" role="tabpanel" aria-labelledby="heading1">
<div class="panel-body"><br />
<ul>
<li>Open PuTTY and click [Session].</li>
<li>Enter your ASUSTOR NAS IP address and the SSH port number.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321170343_win11_putty_ssh_s1.png" alt="" width="500" height="451" title="" align="" /></p>
<br />
<ul>
<li>Click [Connection] <span class="glyphicon glyphicon-arrow-right"></span> [SSH] <span class="glyphicon glyphicon-arrow-right"></span> [Auth] <span class="glyphicon glyphicon-arrow-right"></span> [Credentials].</li>
<li>Click [Browse] and select the private key downloaded from the ASUSTOR NAS.</li>
<li>The private key format required by PuTTY is a ppk file.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321170416_win11_putty_ssh_s2.png" alt="" width="500" height="451" title="" align="" /></p>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321170437_win11_putty_private_key_ppk.png" alt="" width="300" height="21" title="" align="" /></p>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321170500_win11_putty_ssh_s3.png" alt="" width="500" height="451" title="" align="" /></p>
<br />
<ul>
<li>Click [Session].</li>
<li>Enter a customized session name and click [Save] to save settings.</li>
<li>Click [Open].</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321170518_win11_putty_ssh_s4.png" alt="" width="500" height="451" title="" align="" /></p>
<br />
<ul>
<li>A security alert will appear on your first connection. Confirm that the destination information is correct and click [Accept].</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321170531_win11_putty_ssh_s5.png" alt="" width="650" height="411" title="" align="" /></p>
<br />
<ul>
<li>Enter the administrator account that is authorized to use this SSH private key, and now you will be able to sign in.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321170555_win11_putty_ssh_s6.png" alt="" width="650" height="410" title="" align="" /></p>
</div>
</div>
</div>
</div>
<br />
<div class="panel-group" id="accordion2" role="tablist" aria-multiselectable="true">
<div class="panel panel-default">
<div class="panel-heading" role="tab" id="heading2">
<h4 class="panel-title"><a role="button" data-toggle="collapse" data-parent="#accordion2" href="#collapse2" aria-expanded="true" aria-controls="collapse2"><i class="more-less glyphicon icofont-rounded-down"></i> In macOS, the terminal can be used to SSH into your NAS.</a></h4>
</div>
<div id="collapse2" class="panel-collapse collapse" role="tabpanel" aria-labelledby="heading2">
<div class="panel-body"><br />
<p><span style="line-height: 1.5;">The SSH private key file permissions used in macOS only allow the owner to access it, so please be sure the permissions of the file are correct.</span></p>
<ul>
<li>Save the private key downloaded from your ASUSTOR NAS to a folder. The private key formats that macOS can use are key files, pem files and files that start with id_.</li>
<li>Open Terminal.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172051_macOS_screen1.png" alt="" width="750" height="100" title="" align="" /></p>
<br />
<ul>
<li>Enter 'chmod' to change the private key file permission to 0600.
<ul>
<li>Example: <br /><code><strong><i>chmod 0600 ~/.ssh/AS67_Key/as67-ssh-key-testadmin-2025031201.key</i></strong></code></li>
</ul>
</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321171942_macOS_terminal_s1.png" alt="" width="800" height="401" title="" align="" /></p>
<br />
<ul>
<li>Type 'ssh' command and specify the private key file to connect to the ASUSTOR NAS.
<ul>
<li>Example: <br /><code><strong><i>ssh -i ~/.ssh/AS67_Key/as67-ssh-key-testadmin-2025031201.key testadmin@172.16.1.47 -p 8322</i></strong></code></li>
</ul>
</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172142_macOS_terminal_s2.png" alt="" width="800" height="401" title="" align="" /></p>
<br />
<ul>
<li>A security alert will appear on your first connection. Confirm that the destination information is correct and then type [yes] to sign in.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172229_macOS_terminal_s3.png" alt="" width="800" height="401" title="" align="" /></p>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172240_macOS_terminal_s4.png" alt="" width="800" height="401" title="" align="" /></p>
</div>
</div>
</div>
</div>
<br />
<div class="panel-group" id="accordion3" role="tablist" aria-multiselectable="true">
<div class="panel panel-default">
<div class="panel-heading" role="tab" id="heading3">
<h4 class="panel-title"><a role="button" data-toggle="collapse" data-parent="#accordion3" href="#collapse3" aria-expanded="true" aria-controls="collapse3"><i class="more-less glyphicon icofont-rounded-down"></i> In Linux, the terminal can be used to SSH into your NAS.</a></h4>
</div>
<div id="collapse3" class="panel-collapse collapse" role="tabpanel" aria-labelledby="heading3">
<div class="panel-body"><br />
<p><span style="line-height: 1.5;">The SSH private key file permissions used in Linux only allow the owner to access it, so please be sure the permissions of the file are correct.</span></p>
<ul>
<li>Save the private key downloaded from your ASUSTOR NAS to a folder. The private key formats that Linux can use are key files, pem files and files that start with id_.</li>
<li>Open Terminal.</li>
<li>Enter 'chmod' to change the private key file permission to 0600.
<ul>
<li>Example: <br /><code><strong><i>chmod 0600 ~/.ssh/id_as67-ssh-key-testadmin-2025031201</i></strong></code></li>
</ul>
</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172307_uBuntu_terminal_s1.png" alt="" width="860" height="595" title="" align="" /></p>
<br />
<ul>
<li>Type 'ssh' command and specify the private key file to connect to the ASUSTOR NAS.
<ul>
<li>Example: <br /><code><strong><i>ssh -i ~/.ssh/id_as67-ssh-key-testadmin-2025031201 testadmin@172.16.1.47 -p 8322</i></strong></code></li>
</ul>
</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172354_uBuntu_terminal_s2.png" alt="" width="860" height="596" title="" align="" /></p>
<br />
<ul>
<li>A security alert will appear on your first connection. Confirm that the destination information is correct and then type [yes] to sign in.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172431_uBuntu_terminal_s3.png" alt="" width="860" height="596" title="" align="" /></p>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321172443_uBuntu_terminal_s4.png" alt="" width="860" height="596" title="" align="" /></p>
</div>
</div>
</div>
</div>
<br />
<div class="panel-group" id="accordion5" role="tablist" aria-multiselectable="true">
<div class="panel panel-default">
<div class="panel-heading" role="tab" id="heading5">
<h4 class="panel-title"><a role="button" data-toggle="collapse" data-parent="#accordion3" href="#collapse5" aria-expanded="true" aria-controls="collapse5"><i class="more-less glyphicon icofont-rounded-down"></i> SSH connections on macOS and Linux allow you to set up a config file to keep different host connection information. The settings are as follows:</a></h4>
</div>
<div id="collapse5" class="panel-collapse collapse" role="tabpanel" aria-labelledby="heading5">
<div class="panel-body"><br />
<ul>
<li>Create a file named "config" in the .ssh subfolder of the user's Home folder and set default permissions.</li>
<li>Use 'vi' or 'nano' to edit the "config" and save it.</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321173551_macOS_terminal_nano_config_s1.png" alt="" width="800" height="401" title="" align="" /></p>
<br />
<ul>
<li>Add the host connection information according to the following sample format, including the host name or address, port, user and private key file.
<ul>
<li>Example: <br /><code><strong><i>Host as6706ssh<br /></i></strong></code>
<p style="padding-left: 30px;"><code><strong><i>HostName 172.16.1.47<br />Port 8322<br />User testadmin<br />IdentityFile ~/.ssh/AS67_Key/as67-ssh-key-testadmin-2025031201.key</i></strong></code></p>
</li>
</ul>
</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321173729_macOS_terminal_nano_config_s2.png" alt="" width="800" height="401" title="" align="" /></p>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321173746_uBuntu_terminal_use_config_s1.png" alt="" width="860" height="596" title="" align="" /></p>
<br />
<ul>
<li>Enter the Host defined in the config file in the Terminal and you will be able to sign in to the NAS using this configuration.
<ul>
<li>Example: <br /><code><strong><i>ssh as6706ssh</i></strong></code></li>
</ul>
</li>
</ul>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321174102_macOS_terminal_nano_config_s4.png" alt="" width="800" height="401" title="" align="" /></p>
<p><img src="https://www.asustor.com/images/tinymce/upload_img_20250321174117_uBuntu_terminal_use_config_s4.png" alt="" width="860" height="596" title="" align="" /></p>
</div>
</div>
</div>
</div>

Publish: