somy 24 Posted April 22, 2021 Share Posted April 22, 2021 Hi, QNAP started to strengthen security (at last) in their QTS since recent firmware, it is more and more necessary to get Emby installed with a valid digital signature. As an example, I have 2 medium risk security warnings due to lack of valid digital signature: Link to comment Share on other sites More sharing options...
Luke 36999 Posted April 24, 2021 Share Posted April 24, 2021 Link to comment Share on other sites More sharing options...
somy 24 Posted April 27, 2021 Author Share Posted April 27, 2021 On 4/24/2021 at 3:24 AM, Luke said: Hi @Luke, I'm not sure why Emby doesn't take this seriously. Without a valid signature, in theory someone can manipulate the app with malware etc. and distribute to your users, which will damage Emby's reputation. Link to comment Share on other sites More sharing options...
Solution Luke 36999 Posted April 27, 2021 Solution Share Posted April 27, 2021 Hi, we are taking it seriously. Thanks for the feedback. Link to comment Share on other sites More sharing options...
KellicTiger 0 Posted May 21, 2021 Share Posted May 21, 2021 On 4/23/2021 at 8:24 PM, Luke said: Hi Luke. I respectfully disagree. Plex's packages you download from the site have a valid signature. At some point with all the security issues QNAP has been having over the last year they may require a valid signature even for apps loaded outside of their market. It would be a good idea for Emby to get ahead of the curve so you aren't scrambling to get one. Note that the below screenshot shows a Plex app downloaded from their site, not from QNAP's market. Link to comment Share on other sites More sharing options...
Luke 36999 Posted May 21, 2021 Share Posted May 21, 2021 15 hours ago, KellicTiger said: Hi Luke. I respectfully disagree. Plex's packages you download from the site have a valid signature. At some point with all the security issues QNAP has been having over the last year they may require a valid signature even for apps loaded outside of their market. It would be a good idea for Emby to get ahead of the curve so you aren't scrambling to get one. Note that the below screenshot shows a Plex app downloaded from their site, not from QNAP's market. Their package is also approved in the QNAP app store so that is the difference. There is currently no way to have a digital signature if you are not a QNAP approved app. We're doing the best we can with this given the cards dealt to us. Link to comment Share on other sites More sharing options...
somy 24 Posted May 22, 2021 Author Share Posted May 22, 2021 12 hours ago, Luke said: Their package is also approved in the QNAP app store so that is the difference. There is currently no way to have a digital signature if you are not a QNAP approved app. We're doing the best we can with this given the cards dealt to us. I might be wrong on this, but I think it’s possible to publish your app with valid signature without QNAP App Store approval. For example every app I download from third party App Store (https://www.qnapclub.eu/en) has valid signature, I don’t think any of these apps is approved by qnap. Link to comment Share on other sites More sharing options...
Luke 36999 Posted May 22, 2021 Share Posted May 22, 2021 Qnap club has undocumented special permissions from QNAP to sign packages that are uploaded to them, so no, that's not something that a third party developer can replicate. Link to comment Share on other sites More sharing options...
somy 24 Posted May 22, 2021 Author Share Posted May 22, 2021 2 minutes ago, Luke said: Qnap club has undocumented special permissions from QNAP to sign packages that are uploaded to them, so no, that's not something that a third party developer can replicate. Ok, I wasn’t aware of this. So what stops Emby to publish to qnap App Store? Was it due to the partnership qnap has with Plex? I know Emby is in synology App Store. Link to comment Share on other sites More sharing options...
zgoneq 0 Posted February 23, 2022 Share Posted February 23, 2022 Hi, any progress with digital signature? I have to update my qnap to version 5.0.0.1932, and i must everyday start emby server by hand. This is very uncomfortable. Link to comment Share on other sites More sharing options...
Luke 36999 Posted February 28, 2022 Share Posted February 28, 2022 On 2/23/2022 at 1:45 PM, zgoneq said: Hi, any progress with digital signature? I have to update my qnap to version 5.0.0.1932, and i must everyday start emby server by hand. This is very uncomfortable. @zgoneq the workaround is to enable this option in QTS: Thanks. Link to comment Share on other sites More sharing options...
zgoneq 0 Posted March 1, 2022 Share Posted March 1, 2022 thans, it works (for now) Link to comment Share on other sites More sharing options...
Chase1701 0 Posted August 4, 2022 Share Posted August 4, 2022 Ok So it is 2022 and yet no digital signature for QNAP! Is there going to be a solution?? Link to comment Share on other sites More sharing options...
Luke 36999 Posted August 9, 2022 Share Posted August 9, 2022 On 8/4/2022 at 1:59 PM, Chase1701 said: Ok So it is 2022 and yet no digital signature for QNAP! Is there going to be a solution?? Hi, we're hopeful, but in the meantime, there is still a way to install Emby Server for QNAP: https://emby.media/qnap-server.html Link to comment Share on other sites More sharing options...
embyL0VER 70 Posted September 15, 2022 Share Posted September 15, 2022 Hi there, just want to bring this up again cause after updating to the latest firmware (5.0.1.2145) from Qnap, the setting for allowing app installation without digital signatures is again disabled by default. Yes we can still enable this option again but there were other third party apps out now that have a valid signature even if they were not approved from qnap or qnapclub. So just asking if emby will also get a valid one in the future? Link to comment Share on other sites More sharing options...
Luke 36999 Posted September 15, 2022 Share Posted September 15, 2022 10 minutes ago, embyL0VER said: Hi there, just want to bring this up again cause after updating to the latest firmware (5.0.1.2145) from Qnap, the setting for allowing app installation without digital signatures is again disabled by default. Yes we can still enable this option again but there were other third party apps out now that have a valid signature even if they were not approved from qnap or qnapclub. So just asking if emby will also get a valid one in the future? Hi, yes we will keep trying to get into the QNAP catalog just as we are on Synology, Asustor and others. Thanks. Link to comment Share on other sites More sharing options...
jhawkinsvalrico 0 Posted September 18, 2022 Share Posted September 18, 2022 Sorry to say that while I purchased a license for Emby until the application is digitally signed I am removing it from my server. Link to comment Share on other sites More sharing options...
muppets4 23 Posted September 20, 2022 Share Posted September 20, 2022 (edited) Yesterday there was a firmware update. After that, Emby server closes with the following error: "[App center] Emby Server has an invalid digital signature. The app has stopped and cannot be installed on QTS. You can remove it in the app center" So I can't use Emby anymore. Are there plans for a quick update? edit: I am on QTS 5.0.1.2145 Edited September 20, 2022 by muppets4 Link to comment Share on other sites More sharing options...
Luke 36999 Posted September 20, 2022 Share Posted September 20, 2022 7 hours ago, muppets4 said: Yesterday there was a firmware update. After that, Emby server closes with the following error: "[App center] Emby Server has an invalid digital signature. The app has stopped and cannot be installed on QTS. You can remove it in the app center" So I can't use Emby anymore. Are there plans for a quick update? edit: I am on QTS 5.0.1.2145 Did you check your option in QNAP "Allow installation and execution of applications without a digital signature" ? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now