Hi all, I’m getting started with TrueNAS Scale and so far I’m quite happy. I have TrueNAS running behind a reverse proxy and the proxy → nas traffic goes over HTTPS. However, if it is possible I would like to enable mutual TLS, such that only authorized clients can talk to the nas. Is this supporte…

Doesn’t this belong in your reverse proxy configuration?

It does, and I use it as an additional layer to secure client → proxy traffic. However, as I’m big on zero trust I would also like to secure the proxy → nas traffic with mTLS as well. In case of unauthorized network access (be it through the compromise of a different service or physical access to a …

To clarify; the proxy presents certificates that can be used for mTLS. It is up to the backend (TrueNAS in this case) to actually verify the provided client certificate and reject connections that fail the verification or do not present a certificate at all.

I understand. No idea, sorry. I intentionally keep the connection from reverse proxy to applications unencrypted in my home network.

I think you could achieve that either by using self signed certs(probably not that sexy) or by using the ACME clients. But similar to pmh, I think that in a properly configured VLAN, this is probably a waste of CPU cycles. Something else I don’t understand, why would you want to reach the TrueNAS …

Currently, all the internal network traffic utilizes certificates signed by the root CA that lives inside a HSM. All external traffic uses ACME which is terminated at the proxy, which in turn re-encrypts the traffic for internal distribution. I do want to be able to reach the TrueNAS GUI over the i…

It would be great if TrueNAS did support mTLS. You could create a feature request.

Feature request made. [image] Feature request: mTLS support Feature Requests Problem/Justification To secure network communication it would be very helpfull if mTLS support is added to TrueNAS SCALE. Custom TLS certificates for HTTPS traffic is already implemented, allow…

Is mTLS supported?

TrueNAS General

MaxIOPS July 17, 2025, 2:20pm 9

Feature request made.

Topic		Replies	Views
[Moved to Roadmap] Feature request: mTLS support Feature Requests SCALE	2	190	December 31, 2025
How to configure Syslog with (m)TLS? TrueNAS General SCALE , logging	2	331	September 9, 2025
[Not Accepted] NFS RPC-with-TLS support Feature Requests	2	290	October 9, 2025
Core -> SCALE and LLDP TrueNAS General	26	420	June 29, 2026
Cannot log in using HTTPS TrueNAS General SCALE	8	421	December 7, 2025

Is mTLS supported?

Related topics