r/synology • u/iddqd__idkfa • Apr 12 '26

Networking & security How to setup unique vpn certificate per user (synology)

/r/OpenVPN/comments/1sjdkgn/how_to_setup_unique_vpn_certificate_per_user/
0 Upvotes

33% Upvoted

3 comments sorted by

1

u/gadget-freak Have you made a backup of your NAS? Raid is not a backup. Apr 12 '26

You simply revoke VPN access for the user account that is connecting or even delete the user account. No need to revoke the certificate. That is perfectly safe.

1

u/iddqd__idkfa Apr 12 '26

But that would let someone try to login to the server by guessing username and password. Although I have enabled auto blocking ip and user after some attempts, it gives someone the chance to do it. Trying to eliminate that idea.

Maybe better for me to let that go. However, why DO people use unique certificates/easy-rsa than?

1

u/gadget-freak Have you made a backup of your NAS? Raid is not a backup. Apr 12 '26

Unique certificates are often used in a corporate context, there are mechanisms like Active Directory to centrally manage them without anybody actually noticing.

You still have the safety of the single certificate and they expire after one year. You’ll have to update all your clients once a year.