diff --git a/content/CORETutorials/ChangingDefaultShell.md b/content/CORETutorials/ChangingDefaultShell.md index 6ab36b713a..159a5558ab 100644 --- a/content/CORETutorials/ChangingDefaultShell.md +++ b/content/CORETutorials/ChangingDefaultShell.md @@ -11,11 +11,11 @@ The default shell for an account is the environment that user accesses in a loca The default shell for a new installation is `zsh`. You can change the default shell in **Accounts > Users**. -1. Click for the root user and click **Edit**. +1. Click for the root user and click **Edit**. ![AccountsUsersEditRootShell](/images/CORE/Accounts/AccountsUsersEditRootShell.png "Shell Options") 2. Choose the desired shell from the **Shell** dropdown list and click **SAVE**. **Shell** options are: - {{< include file="archive/COREshellOptions.md" >}} + {{< include file="/static/includes/COREshellOptions.md" >}} diff --git a/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md b/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md index df27fa8193..e6385eaece 100644 --- a/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md +++ b/content/CORETutorials/SystemConfiguration/ConfiguringACMEDNS.md @@ -22,11 +22,13 @@ Go to **System > ACME DNS** and click **ADD**. ![SystemACMEDNSAdd](/images/CORE/System/SystemACMEDNSAdd.png "ACME DNS Add") -Name the authenticator, choose a DNS provider, and configure any required **Authenticator Attributes**: +Name the authenticator. +Leave **Authenticator** set to **Route53**. +Enter the **Access ID Key** and **Secret Access Key** from Amazon. -{{< hint type=note >}} -The Route 53 Amazon DNS web service requires entering an Amazon account **Access ID Key** and **Secret Access Key**. -See the [AWS documentation](https://aws.amazon.com/premiumsupport/knowledge-center/create-access-key/) for more details about generating these keys. +{{< hint type=note title="Supported DNS Providers" >}} +Amazon Route 53 is the only supported DNS provider in TrueNAS CORE. +See the [AWS documentation](https://aws.amazon.com/premiumsupport/knowledge-center/create-access-key/) for more details about generating the **Access ID Key** and **Secret Access Key**. {{< /hint >}} Click **SUBMIT** to register the DNS Authenticator and add it to the authenticator options for ACME Certificates. diff --git a/content/CoreSecurityReports/SMB1Advisory.md b/content/CoreSecurityReports/SMB1Advisory.md index f3b0f67bbf..300ca719dd 100644 --- a/content/CoreSecurityReports/SMB1Advisory.md +++ b/content/CoreSecurityReports/SMB1Advisory.md @@ -6,12 +6,17 @@ weight: 10 **Do not use SMB1** -SMB1, also known as SMBv1, is an early version of the Windows SMB file-sharing protocol. [Microsoft has deprecated the SMB1 protocol for security reasons and strongly recommends removing SMB1](https://support.microsoft.com/en-us/help/4034314/smbv1-is-not-installed-by-default-in-windows). SMB1 is disabled by default in FreeNAS and TrueNAS. Current SMB networking clients use later versions of the SMB protocol. +SMB1, also known as SMBv1, is an early version of the Windows SMB file-sharing protocol. [Microsoft has deprecated the SMB1 protocol for security reasons and strongly recommends removing SMB1](https://support.microsoft.com/en-us/help/4034314/smbv1-is-not-installed-by-default-in-windows). +SMB1 is disabled by default in FreeNAS and TrueNAS. +Current SMB networking clients use later versions of the SMB protocol. Microsoft maintains a list of [older products that still require SMB1](https://blogs.technet.microsoft.com/filecab/2017/06/01/smb1-product-clearinghouse/). -Windows Explorer (File Explorer) does not need SMB1, or a separate protocol called NetBIOS (sometimes called "NetBIOS over TCP/IP"), to discover and list SMB shares from a TrueNAS server. All modern versions of Windows use a newer protocol called WS-Discovery, which is more reliable and faster. TrueNAS automatically enables WS-Discovery to allow discovery of SMB shares by client devices. +Windows Explorer (File Explorer) does not need SMB1, or a separate protocol called NetBIOS (sometimes called "NetBIOS over TCP/IP"), to discover and list SMB shares from a TrueNAS server. +All modern versions of Windows use a newer protocol called WS-Discovery, which is more reliable and faster. +TrueNAS automatically enables WS-Discovery to allow discovery of SMB shares by client devices. -**Do not enable SMB1 on FreeNAS or TrueNAS without understanding the security implications and taking measures to protect the network from those risks.** Contact the vendor of older products for upgrades to support newer, more secure versions of SMB, or replace older products with ones that do not require the security risks of SMB1. +**Do not enable SMB1 on FreeNAS or TrueNAS without understanding the security implications and taking measures to protect the network from those risks.** +Contact the vendor of older products for upgrades to support newer, more secure versions of SMB, or replace older products with ones that do not require the security risks of SMB1. **Do not enable SMB1** unless it is absolutely required for essential equipment that cannot be upgraded or replaced, the security implications are understood, and steps have been taken to protect the network from those security risks. diff --git a/content/UIReference/System/ACMEDNS.md b/content/UIReference/System/ACMEDNS.md index 3cb8a27c58..272825a002 100644 --- a/content/UIReference/System/ACMEDNS.md +++ b/content/UIReference/System/ACMEDNS.md @@ -15,7 +15,7 @@ tags: | Name | Description | |------|-------------| | **Name**| Internal identifier for the authenticator. | -| **Authenticator** | Choose a DNS provider and configure any required authenticator attributes. | +| **Authenticator** | DNS provider for the authenticator. Amazon Route 53 is the only supported DNS provider in TrueNAS CORE. | | **Access ID Key** | Key generated by the Amazon Web Services account. See the [AWS Access Key documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) for instructions to generate the key. | | **Secret Access Key** | Key generated by the Amazon Web Services account. See the [AWS Access Key documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) for instructions to generate the key. | {{< /truetable >}} diff --git a/words-to-ignore.txt b/words-to-ignore.txt index 03d4acee9b..8f24276556 100644 --- a/words-to-ignore.txt +++ b/words-to-ignore.txt @@ -1955,6 +1955,7 @@ UIBugReport COREshellOptions Javascript javascript +JavaScript COREUIReference CORERequiredFields COREshellOptions @@ -2021,4 +2022,4 @@ pathname iSCSIShare SharingStorage Diskgraphs -msec +msec \ No newline at end of file