Setup SSL Certificate

Reconfiguring the Default 'Lets Encrypt' SSL Certificate

The main SSL certificate for the AquaCloud can be found in the DSM by navigating to Security >> Certificate

First, before modifying the current certificate its imperative to see what SAN (Subject Alternative Names) are currently assigned. You can just double click on the certificate to reveal this information.

In this instance you can see we have gitlab, time and wiki as valid hostnames for the purpose of this SSL certificate and those will have to be retained so write it down, screenshot it, whatever.

In order to replace it we would click the 'Add' button and then select the 'Replace an existing certificate' radio box, and finally selecting 'aquarian.biz' as the cert we wish to replace.

Select the 'Get a certificate from Lets Encrypt' option and click 'Next'

Here you will enter all the information pertaining to the Domain name which is aquarian.biz, an e-mail which I've used slowglobe@gmail.com, and the SANs which ware the full FQDN of the new hostname separated by semicolons so: time.aquarinan.biz;wiki.aquarian.biz;gitlab.aquarian.biz;newhost.aquarian.biz.

Once you are done click 'Done' and it will reach out, order the new cert and install it for you.

You should now be good to go to your new host via HTTPS.