SSH

The SSH service lets users connect to TrueNAS with the Secure SHell Transport Layer Protocol. When using TrueNAS as an SSH server, the users in the network must use SSH client software to transfer files with SSH.

Allowing external connections to TrueNAS is a security vulnerability! Do not enable SSH unless you require external connections. See Security Recommendations for more security considerations when using SSH.

To configure SSH go to System Settings > Services, find SSH, and click edit to open the basic settings General Options configuration screen.

Use the Password Login Groups and Allow Password Authentication settings to allow specific TrueNAS account groups the ability to use password authentication for SSH logins.

Click Save. Select Start Automatically and enable the SSH service.

If your configuration requires more advanced settings, click Advanced Settings. The basic options continue to display above the Advanced Settings screen. Configure the options as needed to match your network environment.

These Auxiliary Parameters can be useful when troubleshooting SSH connectivity issues:

• Increase the ClientAliveInterval if SSH connections tend to drop.
• Increase the MaxStartups value (10 is default) when you need more concurrent SSH connections.

Remember to enable the SSH service in System Settings > Services after making changes. To create and store specific SSH connections and keypairs, go to Credentials > Backup Credentials.

SFTP (SSH File Transfer Protocol) is available by enabling SSH remote access to the TrueNAS system. SFTP is more secure than standard FTP as it applies SSL encryption on all transfers by default.

Go to System Settings > Services, find the SSH entry, and click the edit to open the Services > SSH basic settings configuration screen.

Select Allow Password Authentication and decide if you need Log in as Root with Password and Log in as Admin with Password.

SSH with root is a security vulnerability. It allows users to fully control the NAS remotely with a terminal instead of providing SFTP transfer access.

Open an FTP client (like FileZilla) or command line. This article shows using FileZilla as an example.

Using FileZilla, enter SFTP://{TrueNAS IP} {username} {password} {port 22}. Where {TrueNAS IP} is the IP address for your TrueNAS system, {username} is the administrator login user name, and {password} is the adminstrator password, and {port 22} to connect.

SFTP does not offer chroot locking. While chroot is not 100% secure, lacking chroot lets users move up to the root directory and view internal system information. If this level of access is a concern, FTP with TLS might be the more secure choice.

Related Content

• Using Rootless Login
• Adding SSH Credentials
• SSH Screens
• Configuring Rsync Tasks
• Rsync Tasks Screens
• SSH Service Screen
• Managing Global 2FA (Two-Factor Authentication)