Certificates can only be issued for FQDN, LAN equipment does not get FQDN names, at least not without manipulation of on prem DNS servers. Meaning that many people are exposing their NAS to WAN without realizing that an SSL cert does absolutely nothing to protect their NAS. The requirement for (valid) SSL in, non commercial, LAN only environments, is short sighted.
You only need an updated certificate if you’re sharing from your NAS to the public Internet.
Your 20 x TS-212P NAS are EoL and shouldn’t be publicly sharing any services.
Not for things running on your LAN. No need.
And as many others have said: YOU SHOULD NOT BE SHARING YOUR NAS ON THE INTERNET!!! You have been warned…
If so, why more recent QNAP devices can retrieve and update their SSL certificates? Does it mean those are not NASes running on LAN?
While I am not saying that providing commercial support forever is a must, EOL devices or software receiving no regular support makes sense. Yet providing support to basic functionalities like updating certificates which applies to all existing devices, will significantly increase the brand affinity.
I have been using QNAP solutions for over ten years. I have been very, very familiar with your products. I extensively use your solutions as image bed, storage for code base or file sharing all over the world based on the Web Server function. I have solid knowledge about Linux system and tunnels like Cloudflare Zero Trust as well. Thus I have a lot of workarounds to apply security policies while exposing contents from my LAN to the Internet. Yet, I still look forward to an official update to QTS SSL official software to address the malfunctioning application/renewal process on legacy QNAP devices like TS-212P which had been caused by Let’s Encrypt! instead of QNAP.
Most importantly, not only whether to expose a NAS to WAN is a user’s decision. Also, one can certainly expose anything inside LAN to WAN in a way he or she likes. For instance, exposing the Web Server embedded in a NAS to WAN via Cloudflare Zero Trust tunnel. But that has nothing to do with what I am discussing here. What I tried to discuss is, now that the recent models of QNAP NAS come with the capability of application/renewal the SSL cert, the older ones shall fairly have the same capability.
*.myqnapcloud.com are FQDNs, aren’t they?
But you would not use them in a LAN and you never ever ever expose a NAS to WAN
If you suggest not publish NAS to WAN why you have ability to get DDNS name? And may be owners of NAS better knows want they publishing resources or not?! It’s just simple task - update lets encrypt cert. But you don’t want to make new package for old QNAP NASes…
Just because you can jump off a bridge, doesn’t mean you should
QNAP discourages exposing the NAS devices via port forwards as well
Ok, but why are you mayn’t fix lets’s encrypt update for old devices?
Not sure what you were trying to say/ask…but in case you ask why QNAP does not update apps for EOL devices, well …they are EOL.
Does Microsoft still release updates for Windows 7?
You can always open a ticket to complain to QNAP support.
Try to get a firmware update for a Cisco product after Cisco EOLs it. You can’t. The remove EVERYTHING about an EOL device. So this is not uncommon.
You are not Microsoft, you are better! ![]()
Do you have statistic about EOL devices using?
How much percent?
Are you replying to me ?
I am neither from QNAP nor do I have any statistics about QNAP models or firmwares out in the wild.
At the end of the day, if you know what you are doing, you do not need an app like that (just get your own cert), if you do not know what you are doing, you should not use an app like that(it does not protect exposed NAS and unsupported/outdated NAS would be a very welcome target for malware) .
Sorry, I thought you are QNAP’s employee.
New Ticket released
QTS SSL Certificate is now in Version 2.2.67 since 30.09.2025 and the same Problem, I can´t renew or regenerate the LetsEncrypt Certificate. Whats wrong with ???
No need for colorful language … ‘wir sind ja hier net in ner Kneipe’.
Open a ticket if you want to vent frustration.
Kneipe triffts ganz gut, professionell hätte länger funktioniert … Hab nen Ticket erstellt und die Farbe rausgenommen, bin gespannt ob das nen Weihnachtsgeschenk wird ![]()
How about posting in English in an English forum?
Sorry…my fault I started it.
