Guide to SSL Certificates for Emby on Windows and Synology

[AngelSing 41]

This certificate was specifically created to use Emby through the Microsoft Edge browser over HTTPS on port 8920, eliminating the "connection is not secure" warning. It is important to note that this certificate works properly in Edge but not in Firefox. For the certificate to function correctly, it must be installed both in the Windows Certificate Manager and on the NAS where the Emby server is hosted.

Note: The domain names and IPs used here are examples (, ) and must be replaced with those corresponding to your network.example.domain.lansubdomain.local.domain

---

1. Generate the .crt and .key files

• Open the Windows terminal:

  Launch a terminal (Command Prompt or PowerShell) and navigate to the folder where you want to generate the files.

• Choose the appropriate command based on your needs:

 

• For a single domain (single SAN):

  openssl req -x509 -newkey rsa:2048 -sha256 -days 3650 -nodes -keyout example.domain.lan.key -out example.domain.lan.crt -subj "/CN=example.domain.lan" -addext "subjectAltName=DNS:example.domain.lan" 

• For multiple domains and IPs (multiple SANs):

  openssl req -x509 -newkey rsa:2048 -sha256 -days 3650 -nodes -keyout example.domain.lan.key -out example.domain.lan.crt -subj "/CN=example.domain.lan" -addext "subjectAltName=DNS:example.domain.lan,DNS:subdomain.local.domain,IP:192.168.1.xx" 
  

 

• Verify the results:

  The files and will be generated in the specified folder. example.domain.lan.crt and example.domain.lan.key

---

2. Create the .pfx file for Emby

• Use the following command to merge the and files into a file: .crt + .key = .pfx

  openssl pkcs12 -export -out example.domain.lan.pfx -inkey example.domain.lan.key -in example.domain.lan.crt -name "example.domain.lan" 

   

• Set a password for the .pfx file:

  You’ll be prompted to enter and confirm a password. You can leave it blank or assign one.

  Note: If you assign a password, remember it, as it will be required in Emby’s settings.

• The file will be generated in the same folder. example.domain.lan.pfx

---

3. Upload the .pfx file to the NAS

• Transfer the file:

  Copy the file to a folder accessible on your NAS. example.domain.lan.pfx

  Ensure that Emby can access the path where the file is stored.

---

4. Install the .crt certificate in Windows

• Open the .crt file directly:

  Double-click on the file . example.domain.lan.crt

  Click the Install Certificate button.

• Follow the installation wizard:

  Select Current User as the target location.

  Choose Place all certificates in the following store.

  Click Browse and select Trusted Root Certification Authorities.

  Click OK, then Next, and finally Finish.

• Confirm the installation:

  A confirmation message will appear asking if you want to install the certificate. Accept to complete the installation.

---

5. Configure Emby with the certificate

• Log in to Emby and navigate to Settings → Network.
• Locate the section Custom SSL certificate path.
• Enter the path to the file you uploaded to the NAS..pfx
• If you set a password for the file, enter it in the corresponding field. If you left it blank, leave the field empty..pfx
• In Secure connection mode, select:

  "Preferred, but not required" (this allows connections via both HTTP and HTTPS).

• Click Save and restart the Emby server to apply the changes.

---

Important Notes

• The domain names (, ) and IP () are examples. Replace them with the actual domains and IPs of your network.example.domain.lansubdomain.local.domain192.168.1.xx
• If you need to include more addresses or subdomains, add them to the field when generating the certificate. For example:subjectAltName

  -addext "subjectAltName=DNS:example.domain.lan,DNS:subdomain.local.domain,DNS:extra.domain.com,IP:192.168.2.xx" 

 

---

Credits

This guide was completed with the help and insights provided by @Lessajwhose expertise made this task much easier. Thank you for your support!

 

Final Note

If there's anything I missed or ways to improve this guide, I’d greatly appreciate your feedback and insights. Sharing your knowledge or suggesting adjustments would not only help refine this guide but also assist others who might face similar challenges. Feel free to share your thoughts—I'm always open to learning and improving. Thank you in advance!

Edited November 20, 2024 by AngelSing

[Carlo 4550]

Thanks for documenting that for everyone!

Great job.