1.43.2.10687
QNAP NAS
The latest .qpkg version will not install. It gives an Invalid Signature error.
I do not wish to turn off signature checking.
Z
So sorry, but at the moment Plex only provides PMS for QNAP without a digital signature
You can instead verify that it indeed is a Plex provided download by following this:
Also note that you only need to disable signature checking during the installation
After that the check can be reenabled
I followed this recommendation, installed PlexMediaServer-1.43.2.10687-563d026ea-x86_64.qpkg to a QNAP TS-453D running QTS 5.2.9.3451, and was greeted with this message:
- Plex Media Server has an invalid digital signature. The app has stopped and cannot be installed on QTS. You can remove it in the App Center.
So now we’ve lost our Plex server. Is there a recommended way to return to the previous version? Thanks for any help.
Did you follow the steps here: https://support.plex.tv/articles/using-unsigned-qnap-apps/
Yes, I went to App Center > Settings > General and checked “Allow installation of applications without a valid digital signature,” and then installed the qpkg, accepting all the warnings about installing packages without a valid digital signature. I restarted the Plex server with no further issue except for the expected warnings.
Then I went back to App Center > Settings > General and unchecked “Allow installation of applications without a valid digital signature,” and Plex immediately crashed. I then rechecked “Allow installation of applications without a valid digital signature,” and was able to restart Plex successfully.
Please add my name to the list of QNAP-owning Plex customers who would love to have a valid digital signature to seal this massive security hole I’ve just created on this QNAP box.
A few things - this un “signed” issue never showed itself before this most recent release - not sure if that is because prior versions were signed or something else? Also, because it’s not signed, my QNAP server will stop the app from running post installation. This seems likes a pretty easy thing that our friends at plex could solve…give it a valid digital signature.
Correct. Builds before 2026 where signed, but sadly the signing certificates expired, and now there are new and more secure req. to this
A developer said that delays are due to the fact that they need HW signed certificates, and when getting that, they’ll need to incorporate it into their build system.
Same developer also said that they indeed is working on this
