Get a Quote     (408) 943-4100               TrueNAS Discord      VendOp_Icon_15x15px   Commercial Support Toggle between Light and Dark mode
TrueNAS.com Software Systems Company Community Security iX Portal Download

  1. Documentation Hub
  2. /
  3. TrueNAS SCALE
  4. /
  5. UI Reference Guide
  6. /
  7. System Settings
  8. /
  9. Services
  10. /
  11. SSH Service Screen
Edit this page

SSH Service Screen

  3 minute read.

Last Modified 2022-12-12 10:09 -0500

The System Settings > Services > SSH screen allows you to set up SSH service on TrueNAS SCALE.

Click to open the Services > SSH configuration screen.

Allowing external connections to TrueNAS is a security vulnerability! Do not enable SSH unless you require external connections. See Security Recommendations for more security considerations when using SSH.

SSH Basic Settings Options

The Basic Settings options display by default when you edit the SSH service.

ServicesSSHBasicSettingsGeneralOptions

General Options

Setting Description
TCP Port Enter the port number for SSH connection requests.
Log in as Root with Password Select to allow the root (administration) account to log into TrueNAS with a password. You must set a password for the root user account. Root logins are discouraged!
Allow Password Authentication Select to allow all user accounts to login via SSH and the account password. Leave checkbox clear to disable and require exchanging SSH keypairs for client systems attempting to access this system. Warning: when directory services are enabled, this setting grants access to all users the directory service imported. When disabled, authentication requires keys for all users. This requires additional SSH client and server setup.
Allow Kerberos Authentication Select to allow kerberos authentication. Ensure valid entries exist in Directory Services > Kerberos Realms and Directory Services > Kerberos Keytabs and the system can communicate with the kerberos domain controller before enabling this option.
Allow TCP Port Forwarding Select to allow users to bypass firewall restrictions using the SSH port forwarding feature. For best security leave this option disabled.

SSH Advanced Settings Options

Advanced Settings include the General Options settings. Advanced settings specify bind interfaces, SFTP settings, ciphers and any additional parameters you want to use.

ServicesSSHAdvancedSettingsOptions

Setting Description
Bind Interfaces Select the network interface on your system for SSH to listen on from the dropdown list. Leave all options unselected for SSH to listen on all interfaces.
Compress Connections Select to attempt to reduce latency over slow networks.
SFTP Log Level Select the syslog(3) level of the SFTP server from the dropdown list options. Options are Quiet, Fatal, Error, Info, Verbose, Debug, Debug2 or Debug3.
SFTP Log Facility Select the syslog(3) facility of the SFTP server option from the dropdown list. Options are Daemon, User, Auth and Local 0 through Local7.
Weak Ciphers Select a cypher from the dropdown list. Options are None or AES128-CBC. To allow more ciphers for sshd(8) in addition to the defaults in sshd_config(5). Use None to allow unencrypted SSH connections. Use AES128-CBC to allow the 128-bit Advanced Encryption Standard.
WARNING: These ciphers are security vulnerabilities. Only allow them in a secure network environment.
Auxiliary Parameters Enter any sshd_config(5) options not covered in this screen. Enter one option per line. Options added are case-sensitive. Misspellings can prevent the SSH service from starting.

Related Content