NAS540 Certificate Problem

Hi

I have a NAS 540

I can no longer log into it via its web console.

I get a connection refused message

I believe this to be a certificate error (I tried to renew the certificate the last time I DID manage to log into the NAS by the Web Browser interface)

I found this article …

https://mysupport.zyxel.com/hc/en-us/articles/360006916979--NSA-NAS-How-to-fix-certificate-error-on-browser-when-accessing-NAS-WebUI

If the built-in self-signed certificate has expired or you wish to customize the certificate the NAS uses, please do the following.

1. Open SSH client
2. SSH into NAS (e.g. ssh root@nas_ip_or_hostname)
3. Type the following command to generate a certificate and key: openssl req -newkey rsa:2048 -nodes -keyout /etc/zyxel/cert/key/default_key.cer -x509 -days 3650 -out /etc/zyxel/cert/default.cer
4. Provide info needed to generate the certificate
5. Verify the certificate details with the following command: openssl x509 -text -noout -in /etc/zyxel/cert/default.cer
6. Reboot the NAS

If you have obtained a certificate from a CA to use with the NAS, please do the following to replace the certificate on the NAS with your signed cert.

1. Make sure the certificate is using the correct extension required by NAS, CER.
   • CRT and CER are interchangeable, rename the cert file "default.cer".
   • If cert is using other extension check with your CA to see if they offer CRT/CER.
   • Use openssl to convert your certificate to CER format.  (e.g. openssl x509 -outform DER -in cert.pem -out default.cer)
2. Make sure the certificate key is using the correct extension, CER.  (e.g. openssl rsa -in private.key -outform DER -out default_key.cer)
3. Use a transfer client, such as WinSCP/SFTP, to overwrite default.cer and default_key.cer on the NAS.
   • Place the default.cer file in the /etc/zyxel/cert/ directory.  (e.g. "sftp>put source_directory/default.cer /etc/zyxel/cert/", Windows users can drag and drop files using WinSCP)
   • Place the default_key.cer file in the /ect/zyxel/cert/key directory.  (e.g. "sftp>put source_directory/default_key.cer /etc/zyxel/cert/key/", Windows users can drag and drop files using WinSCP)
4. Reboot the NAS

I think I need to regenerate the self-signed certificate (so the first block of instructions)

I can ssh into the NAS no problem, generate the cert, verify the cert, reboot the NAS but still get the same issue

ANy further suggestions please

Thanks