The Best PLEX, Emby and/or Jellyfin NAS Devices Released in 2025

Network media servers in 2025 range from tiny single drive boxes to fairly serious multi bay systems that can sit at the center of a home network. This article looks specifically at NAS hardware released in 2025 that can sensibly replace or supplement streaming services by running Plex, Jellyfin or Emby. The focus is on devices that arrive as complete appliances, with both hardware and a NAS style operating system included, so you can put a box on the network, install a media server app and start watching without building a PC or learning a full server stack.

To be included here, a NAS has to have gone on general sale in 2025, ship with its own OS rather than as a bareboard, and be able to run Plex Media Server, with Jellyfin and Emby support noted where it exists. In practical terms, that means hardware that can handle 4K and 1080p playback for multiple users and is realistically capable of at least 2 simultaneous 4K transcodes and 5 simultaneous 1080p transcodes, with a single exception where the overall package still makes sense for more limited workloads. RAID options, expansion, power use and noise are all taken into account, but the main filter is whether the device can function reliably as a modern media server on a typical home or small office network.

#1 Synology BeeStation Plus 8TB – $399 to $419

SPECS: Intel Celeron J4125 quad core 2.0 to 2.7 GHz – 4 GB DDR4 – 1 x 3.5″ 8 TB SATA bay (pre installed) – 1 x 1 GbE RJ45 / 1 x USB A 3.2 Gen 1 / 1 x USB C 3.2 Gen 1 – no M.2 SSD support.

BeeStation Plus is aimed at users who want a simple, appliance like Plex box rather than a configurable NAS. It runs Synology’s cut down BeeStation OS, has Plex Media Server support built in, and is set up entirely through a guided app and browser flow, so there is minimal configuration overhead. The hardware is sufficient for basic 4K and 1080p Plex use for a small number of clients, but the single non replaceable drive bay and lack of expansion, RAID options or M.2 slots mean it is best treated as a starter Plex unit for light libraries rather than a long term, scalable media server, and there is no official Jellyfin or Emby integration at this time.

What we said in our March ’25 Review HERE:

The Synology BeeStation marks a significant shift in Synology’s product line, targeting a new segment of users with its simplified yet functional design. This device stands out as an excellent middle ground between ease of use and a comprehensive private cloud system, providing secure and seamless access to stored data. While it is incredibly user-friendly and easy to set up, the lack of LAN access by default and its single-bay, 4TB-only configuration at launch might limit its appeal to more tech-savvy users or those seeking greater flexibility and expandability. The BeeStation’s unique selling point is its simplicity, making it a compelling choice for those new to NAS systems or for users who prioritize ease of use over extensive customization options. However, its simplicity also means that it lacks the extensive app support found in Synology’s DSM platform, potentially disappointing users accustomed to the richer application ecosystem offered by Synology’s more advanced models.

For users concerned about security, the BeeStation still upholds Synology’s reputation for secure data handling, with encrypted data transmission as a standard feature. However, experienced users who prefer a more hands-on approach to their NAS setup might find the BeeStation’s lack of advanced configuration options and its reliance on internet access for setup somewhat restrictive. In terms of market positioning, the BeeStation fills a gap left by other brands like WD and Seagate in offering ‘Easy NAS’ systems. Its competitive pricing, particularly considering the included 4TB of storage, makes it an attractive option for users seeking a private cloud solution without the recurring costs associated with third-party cloud services. Despite these potential drawbacks, the BeeStation is a solid entry-level NAS solution, especially for those seeking a personal cloud with minimal setup and maintenance. It may not be as feature-rich as Synology’s DSM-based NAS devices, but for its intended audience, the BeeStation provides a well-balanced combination of functionality, ease of use, and affordability. Synology’s move to cater to a broader, less technically inclined audience with the BeeStation demonstrates their understanding of market trends and user needs, offering a solution that balances simplicity with the reliability and quality Synology is known for.

In the end, the Synology BeeStation is an ideal choice for users seeking a straightforward, reliable, and cost-effective personal cloud solution. It represents Synology’s commitment to diversifying their product range, catering to the evolving needs of different user segments. While it may not suit everyone, especially those looking for advanced features and customization, it excels in its role as a user-friendly, secure, and affordable entry-level NAS device.

SOFTWARE - 7/10

HARDWARE - 8/10

PERFORMANCE - 7/10

PRICE - 10/10

VALUE - 10/10

8.4

PROS

User-friendly setup, ideal for beginners or those seeking a simple cloud solution.
Secure data handling with encrypted data transmission.
Comes with 4TB of storage included, offering good value.
Compact and lightweight design, enhancing portability.
Quiet operation, suitable for home or office environments.
Integrates seamlessly with popular cloud services like Google Drive and OneDrive.
Affordable pricing at $199, a cost-effective alternative to third-party cloud services.
Supports remote access, allowing data management from anywhere and across client devices/OS
Synologys reputation for quality and reliability is still clear on this smaller scale.
Several client tools (BeeFiles, BeePhotos and Desktop sync tool) for Windows, Mac, iOS and Android available for tailored access
System configuration backup option to USB/C2 (Often absent in budget cloud solutions)
AI Photo Recognition in BeePhotos for faces, Objects and geo data scraping + Advanced filter/search

CONS

Lacks the extensive app support and customization found in Synology\'s DSM platform.
Only available in a single-bay, 4TB configuration at launch, limiting expandability.
Single 5400RPM HDD running everything leads to slowdown more than you think!
LAN access is disabled by default, which may not suit all users.
Designed for a specific user base, may not meet the needs of more advanced users.

#2 Minisforum N5 NAS – $599 to $749

SPECS: AMD Ryzen 7 255 8 core 16 thread up to 4.9 GHz – up to 96 GB DDR5 via 2 SODIMM slots – 5 x 3.5″/2.5″ SATA bays – 1 x 10 GbE RJ45 / 1 x 5 GbE RJ45 / 2 x USB4 – 3 x M.2 2280 NVMe or U.2 SSD slots (PCIe 4.0).

The Minisforum N5 is a compact 5-bay NAS that targets users who want preconfigured hardware with some workstation derived design features. It uses an x86 CPU in the same general class as the Aoostar WTR Max, paired with an internal storage module of 64 GB for the system volume, and is typically sold in the 599 to 699 USD range, with the separate Pro variant occupying a higher bracket. The chassis integrates a removable drive base section for easier maintenance, and the platform includes multi-gig networking up to 10 GbE and 5 GbE, a PCIe expansion slot and USB4 connectivity for additional bandwidth or external devices. Minisforum ships the N5 with its own NAS operating system to provide an immediate out of box experience, but the software is still relatively young and many buyers elect to overwrite the included module with a more established NAS or server OS. Throughout 2025, availability has been intermittent, reflecting a level of demand from home lab users who want higher specification NAS hardware without building entirely from individual components.

What we said in our July ’25 Review HERE:

The Minisforum N5 Pro is an impressive and highly versatile NAS platform that successfully combines the core strengths of a storage appliance with the capabilities of a compact, workstation-class server, making it suitable for demanding and varied use cases. Its defining features include a 12-core Ryzen AI 9 HX PRO 370 CPU with 24 threads and onboard AI acceleration up to 50 TOPS, support for up to 96GB of ECC-capable DDR5 memory for data integrity, and a hybrid storage architecture offering up to 144TB total capacity through a mix of five SATA bays and three NVMe/U.2 slots. Additional highlights such as ZFS file system support with snapshots, inline compression, and self-healing, along with high-speed networking via dual 10GbE and 5GbE ports, and expansion through PCIe Gen 4 ×16 and OCuLink interfaces, position it well beyond the capabilities of typical consumer NAS systems. The compact, fully metal chassis is easy to service and efficiently cooled, enabling continuous operation even under sustained virtual machine, AI, or media workloads.

At the same time, the bundled MinisCloud OS, while feature-rich with AI photo indexing, Docker support, and mobile integration, remains a work in progress, lacking some enterprise-grade polish, robust localization, and more advanced tools expected in mature NAS ecosystems. Minor drawbacks such as the external PSU, the thermally challenged pre-installed OS SSD, and the higher cost of the Pro variant relative to the standard N5 are important to weigh, particularly for users who may not fully utilize the Pro’s ECC and AI-specific advantages. For advanced users, homelab builders, and technical teams who require high compute density, flexible storage, and full control over their software stack, the N5 Pro delivers workstation-level performance and configurability in NAS form—offering one of the most forward-thinking and adaptable solutions available today in this segment.

The is now available to buy: Minisforum N5 Pro (Check Amazon) – HERE Minisforum N5 Pro (Check AliExpress) – HERE Shop for NAS Hard Drives on Amazon – HERE Shop for SSDs for your N5 Pro on Amazon – HERE

BUILD QUALITY - 10/10

HARDWARE - 9/10

PERFORMANCE - 9/10

PRICE - 7/10

VALUE - 8/10

8.6

PROS

High-performance AMD Ryzen AI 9 HX PRO 370 CPU with 12 cores, 24 threads, and AI acceleration (50 TOPS NPU) is INCREDIBLE for a compact desktop purchase
Support for up to 96GB DDR5 memory with ECC, ensuring data integrity and stability in critical environments
ZFS-ready storage with numerous ZFS and TRADITIONAL RAID configurations, snapshots, and inline compression
Hybrid storage support: five 3.5\\\"/2.5\\\" SATA bays plus three NVMe/U.2 SSD slots, with up to 144TB total capacity
Versatile expansion options including PCIe Gen 4 ×16 slot (×4 electrical) and OCuLink port for GPUs or NVMe cages
Dual high-speed networking: 10GbE and 5GbE RJ45 ports with link aggregation support + (using the inclusive MinisCloud OS) the use of the USB4 ports for direct PC/Mac connection!
Fully metal, compact, and serviceable chassis with thoughtful cooling and accessible internal layout - makes maintenance, upgrades and troubleshooting a complete breeze!
Compatibility with third-party OSes (TrueNAS, Unraid, Linux) without voiding warranty, offering flexibility for advanced users

CONS

MinisCloud OS is functional but immature, with unfinished localisation and limited advanced enterprise features - lacks MFA, iSCSI, Security Scanner and More. Nails several key fundamentals, but still feels unfinished at this time.
Despite External PSU design (will already annoy some users), it generates a lot of additional heat and may not appeal to all users overall
Preinstalled 64GB OS SSD runs hot under sustained use and lacks dedicated cooling. Plus, losing one of the 3 m.2 slots to it will not please everyone (most brands manage to find a way to apply an eMMC into the board more directly, or use a USB bootloader option as a gateway for their OS
Premium $1000+ pricing may be hard to justify for users who don’t need ECC memory or AI capabilities compared to the standard N5 at $500+

#3 TerraMaster F4 SSD NAS – $320 to $399

SPECS: Intel N95 quad core up to 3.4 GHz – 8 GB DDR5 (expandable to 32 GB) – 4 x M.2 2280 NVMe SSD bays – 1 x 5 GbE RJ45 / 2 x USB A 3.2 Gen 2 / 1 x USB C 3.2 Gen 2 / HDMI 2.0b – 4 x M.2 NVMe PCIe 3.0 slots (2 x2 / 2 x1).

The F4 SSD is an all flash NAS designed for users who want a compact, relatively low power Plex or Jellyfin server without mechanical drives. Its Intel N95 CPU and integrated graphics are sufficient for multiple 1080p and a modest number of 4K transcodes, and the 5 GbE interface allows the box to make use of higher network throughput than 1 GbE units. TerraMaster’s TOS 6 system offers a one click Plex package and container support for Jellyfin and Emby, but the interface and ecosystem are less refined than those from the largest NAS brands, and performance is ultimately limited by the entry level CPU and PCIe layout when many concurrent streams or heavier background tasks are involved.

What we said in our Aug ’25 Review HERE:

The TerraMaster F4 SSD presents itself as a well-considered entry into the compact, all-flash NAS segment, balancing low noise, energy efficiency, and competitive performance at a sub-$400 price point. With its fanless NVMe-based design, Intel N95 quad-core processor, and DDR5 memory, it meets the essential needs of home and small office users looking for a reliable and responsive storage solution. The inclusion of TerraMaster’s increasingly capable TOS 6 operating system, featuring AI-driven photo management, centralized backup, and Docker/VM support, makes it more than just a network storage device—it becomes a lightweight but versatile data center for the home. Its TRAID support allows for mixed SSD deployments with easy expansion, which is particularly attractive to users upgrading gradually or working within budget constraints. The thoughtful internal layout and cooling also ensure performance remains consistent even under sustained load, without sacrificing the near-silent operation.

However, the F4 SSD is not without caveats. The use of a single 5GbE port, without redundancy or aggregation, may deter users requiring network failover or higher throughput for simultaneous operations. Additionally, although the PCIe lane allocation strategy maximizes the N95’s limited bandwidth, the asymmetry between Gen3 x2 and x1 slots could bottleneck RAID performance depending on how volumes are configured. When compared to the larger F8 SSD or DIY options with dual 10GbE or ECC support, the F4 SSD may feel limiting to power users or business environments with stricter reliability requirements. That said, for the vast majority of home users, content creators, and prosumers looking for an all-in-one, high-speed NAS that blends well into living spaces, the F4 SSD delivers a solid and accessible solution. Its price-to-performance ratio, combined with the simplicity of deployment and maturing software ecosystem, makes it a compelling option in the growing market of SSD NAS devices.

SOFTWARE - 7/10

HARDWARE - 8/10

PERFORMANCE - 7/10

PRICE - 9/10

VALUE - 9/10

8.0

PROS

Compact, toolless chassis with easy-access thumb screw and SSD installation
All-flash NVMe architecture with support for four M.2 2280 SSDs
5GbE network port enables high-speed local and remote transfers
TRAID and TRAID+ allow mixed-capacity SSDs and seamless storage expansion
TOS 6 OS includes Plex, Jellyfin, Docker, VM support, and AI photo indexing
Quiet operation (19 dB) and low power usage (32W under load)
Priced competitively at $399 for a turnkey SSD NAS

CONS

Single 5GbE port with no failover or link aggregation
Two of the four SSD slots are limited to PCIe Gen3 x1, creating potential RAID bottlenecks
Non-ECC DDR5 memory may not meet strict data integrity requirements

#4 ZimaBoard 2 Single Board Server – $239 to $349

SPECS: Intel N150 quad core up to 3.6 GHz – 8 or 16 GB LPDDR5x – 2 x SATA 3.0 6 Gb/s ports for 3.5″/2.5″ drives (external bays or enclosures required) – 2 x 2.5 GbE RJ45 / 2 x USB 3.1 Type A / 1 x Mini DisplayPort 1.4 – M.2 SSD support via PCIe 3.0 x4 add in card only.

ZimaBoard 2 functions as a small, fanless compute module that can be combined with any suitable SATA enclosure or loose drives to create a highly customised Plex or Jellyfin server. It ships with ZimaOS, which exposes a NAS style interface, app catalogue and container options, so the system is usable out of the box without manually installing a general purpose Linux distribution. Dual 2.5 GbE ports and Intel Quick Sync support give it enough capability for several 1080p and selected 4K transcodes, but the absence of internal bays or native M.2 slots means storage design is entirely external, and the device is better suited to users who do not mind assembling their own chassis or reusing existing cases and drive cages.

What we said in our April ’25 Review HERE:

The ZimaBoard 2 is a competent and thoughtfully assembled single-board server that builds meaningfully on IceWhale’s earlier efforts, especially the original ZimaBoard and the ZimaBlade. Its design clearly targets users who want more flexibility and performance than traditional ARM-based boards can offer, but who also value power efficiency, silence, and a small footprint. The use of an Intel N150 CPU, 8GB of LPDDR5x memory, dual 2.5GbE ports, and a PCIe 3.0 x4 slot makes it viable for a variety of home server roles—from basic NAS and smart home coordination to lightweight container hosting and local media streaming. Features like onboard SATA, USB 3.1, and a DisplayPort connection further add to its utility. However, there are hardware limitations that may affect long-term suitability for advanced deployments. The soldered RAM cannot be upgraded, and the internal eMMC storage, while useful for initial setup, is too slow for OS-level responsiveness in more demanding use cases. Passive cooling, while appreciated for silence, also imposes some thermal limitations depending on the deployment environment.

On the software side, ZimaOS offers a decent out-of-the-box experience that caters to users with minimal technical background. It handles core tasks like application deployment, file sharing, and system monitoring without requiring advanced configuration, and its Docker-based App Store simplifies access to popular tools. For more experienced users, the system supports third-party OS installation, which is likely how many will ultimately use the ZimaBoard 2. Still, as a bundled solution, ZimaOS has matured significantly and now presents itself as a lightweight, capable, and non-intrusive platform for those who prefer to get started immediately. In the broader context of DIY server hardware, ZimaBoard 2 occupies a middle ground: more powerful and modular than Raspberry Pi-class systems, yet more constrained than full x86 mini PCs or enthusiast-grade NAS hardware. For those who understand and accept these trade-offs, and are willing to plan around its limitations, the ZimaBoard 2 offers a reliable and flexible foundation for compact, energy-efficient computing at the edge.

BUILD QUALITY - 10/10

HARDWARE - 8/10

PERFORMANCE - 8/10

PRICE - 9/10

VALUE - 10/10

9.0

PROS

x86 Architecture – Compatible with a wide range of operating systems including ZimaOS, Unraid, TrueNAS SCALE, and Proxmox.
Dual 2.5GbE LAN Ports – Offers strong networking capabilities for multi-service workloads and gateway setups.
PCIe 3.0 x4 Slot – Enables high-speed expansion for 10GbE NICs, NVMe storage, or combo cards.
Fanless, Silent Operation – Completely passively cooled, ideal for home or quiet office environments.
Compact and Durable Build – Small footprint with an all-metal chassis that doubles as a heatsink.
ZimaOS Included – User-friendly OS with a Docker-based App Store and basic VM tools, ready out of the box.
Flexible Storage Options – Dual SATA ports plus USB 3.1 support for connecting SSDs, HDDs, or external drives.
Low Power Consumption – Efficient 6W CPU with ~10W idle and ~40W max under heavy load scenarios.

CONS

Non-Upgradable RAM – 8GB of soldered LPDDR5x limits long-term scalability for memory-intensive tasks.
Slow/Small Default Internal Storage – 32GB eMMC is convenient but underperforms for OS-level responsiveness or high I/O workloads.
Thermal Headroom is Limited – Passive cooling alone may not be sufficient in closed environments or under sustained load without added airflow.
Not Launching on Traditional Retail, but instead on Crowdfunding.

#5 UGREEN NASync DH4300 Plus – $365 to $390

SPECS: Rockchip RK3588 8 core ARM (4 x Cortex A76 + 4 x Cortex A55) up to around 2.4 GHz – 8 GB DDR5 – 4 x 3.5″/2.5″ SATA bays – 1 x 2.5 GbE RJ45 / HDMI 2.0b / 1 x front USB C 3.2 Gen 1 / 2 x USB A 3.2 Gen 1 – no internal M.2 SSD slots.

The NASync DH4300 Plus is a 4 bay ARM based NAS that targets users who want RAID 5 capable storage for Plex or Jellyfin along with general backup duties at a moderate price. UGREEN’s UGOS Pro operating system includes its own media apps, an app store and containerisation features, and community testing has confirmed that Plex can achieve multiple 1080p and several 4K streams, benefiting from the RK3588’s hardware video engines. There is only a single 2.5 GbE port and no M.2 cache or expansion options, so scaling is limited to the 4 SATA bays and external USB storage, but for users who prioritise RAID 5 resilience, low to mid range transcoding capacity and comparatively low power use, it fits the role of a budget multi user media and file server.

What we said in our August ’25 Review Here:

The UGREEN DH4300 Plus carves out a unique niche in the budget NAS landscape by delivering hardware typically reserved for higher-tier systems at a much lower price point. Its RK3588 processor, 8GB of RAM, and support for 2.5GbE networking place it well ahead of most similarly priced competitors in terms of raw specifications. Additionally, features such as HDMI output, 10Gbps USB ports, and local AI-powered photo indexing are rare to find in entry-level NAS systems. Despite its plastic-heavy internal design and lack of expansion options like PCIe or M.2, the device delivers stable performance for file sharing, media access, and low-intensity AI workloads. It is not suited for power users demanding virtual machines or advanced snapshot automation, but within its class, the DH4300 Plus presents an appealing balance between cost and capability.

That said, the software experience is still a work in progress. UGOS Pro covers the essentials and offers a visually accessible UI, but lacks the advanced features and ecosystem integration found in more mature platforms like Synology DSM or QNAP QTS. Docker and snapshot support add welcome flexibility, but the absence of native Jellyfin, iSCSI, and VM functionality limits its use in more complex environments. Still, for home users, media collectors, or small office setups looking for reliable backup, modest AI-enhanced photo sorting, and smooth 4K playback, the DH4300 Plus delivers value well beyond its price tag. While it won’t replace high-end NAS appliances, it serves as a capable, efficient, and quietly innovative option in a saturated entry-level NAS market.

SOFTWARE - 6/10

HARDWARE - 7/10

PERFORMANCE - 6/10

PRICE - 9/10

VALUE - 10/10

7.6

PROS

Powerful ARM CPU: Equipped with the RK3588 SoC, offering 8 cores, integrated GPU, and NPU for AI workloads.
Generous (but fixed!) Memory: 8GB LPDDR4X RAM, rare in budget NAS systems, supports multitasking and Docker use.
2.5GbE Network Port: Provides faster-than-Gigabit throughput for backups, media streaming, and multi-user access.
HDMI 2.1 Output: Rare on ARM powered turnkey NAS, and enables direct media playback or NAS control at up to 4K 60Hz, uncommon in value-tier NAS units.
USB 10Gbps Ports: Dual USB-A 10Gbps and one USB-C 5Gbps allow for high-speed backups or external storage expansion.
AI Photo Management: Built-in NPU supports facial recognition and scene detection for local, private media organization.
Low Power Consumption: Efficient under load (~30W) and idle (~5W without drives), suitable for 24/7 operation.

CONS

No PCIe or M.2 Expansion: Lacks future scalability for NVMe caching, 10GbE, or other upgrades.
Single LAN Port: Only one 2.5GbE port, with no failover or link aggregation support.
Limited Software Ecosystem: UGOS Pro lacks iSCSI, VM support, and native Jellyfin, trailing behind DSM/QTS in maturity.

SUBSCRIBE TO OUR NEWSLETTER
[contact-form-7]
Join Inner Circle

Want to follow specific category? Also Read... Subscribe You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

Is the Sipeed NanoKVM Safe? On-board Microphone Identified

The Sipeed NanoKVM Cube is a low cost, network connected KVM built around the LicheeRV Nano RISC-V module, and recent reporting has drawn attention to the fact that this first generation hardware quietly inherited an onboard analog microphone from that core board. While the LicheeRV Nano documentation clearly lists audio input and output capabilities, the NanoKVM product materials initially focused on its KVM role and did not prominently call out the presence of a microphone on the internal PCB. That gap in presentation, combined with the device’s origin in China and its role as an always-on, remotely accessible appliance, has led to questions about transparency and potential privacy impact. This article reviews what is actually on the hardware, how Sipeed has responded, which issues have been addressed in software, and what residual risk remains for users who already have the NanoKVM Cube deployed.

The NanoKVM Cube and That Microphone – What We Learned?

The initial detailed public discussion of the NanoKVM Cube microphone came from a Telefoncek.si research article, which documented security testing of early units and highlighted the presence of a small, operational microphone on the device’s PCB. The NanoKVM Cube is built on the LicheeRV Nano platform, and that design decision is the origin of the audio hardware. The LicheeRV Nano specification explicitly lists an onboard analog silicon microphone for audio input and a PA amplifier for driving a small speaker, because the module is intended as a general purpose SBC for a range of embedded applications. When Sipeed used this module as the core of a consumer facing KVM, the Cube inherited that audio circuitry intact, including the tiny surface mount MEMS microphone, even though typical KVM usage does not require audio capture capabilities.

What Telefoncek.si article from Feb ’25  drew attention to was the combination of this hardware and a software stack that already contained working audio tooling. Researchers who obtained early NanoKVM units found that, with SSH access, standard ALSA tools such as amixer and arecord could be used to adjust gain and record ambient sound through the built in microphone, and that the resulting audio files could be copied or potentially streamed off the device. At that time, the NanoKVM product page described its relationship to the LicheeRV Nano SDK and resources in general terms, but did not highlight that a functioning microphone remained present on the KVM board. For many users, that gap between what the SBC documentation said and what the KVM product page emphasized was perceived as a lack of clear disclosure rather than a predictable consequence of module reuse.

The NanoKVM Security Concern and Presentation Issues

The initial concern around NanoKVM security was not limited to the microphone. Early firmware builds shipped with default credentials, SSH enabled, weak web security controls, and hardcoded encryption keys that were identical across devices. Researchers also found diagnostic and security utilities present on the system image that were more appropriate for development or lab use than for a small appliance likely to be exposed on home or small business networks. These findings created a picture of a product that had been moved from prototype to retail relatively quickly, with baseline functionality in place but limited attention paid to hardening or least privilege.

Presentation played a significant role in how the microphone issue was perceived. For the LicheeRV Nano SBC, the presence of audio input and output is clearly listed as part of the hardware specification, and that makes sense for a general purpose module. For NanoKVM Cube, the public facing documentation initially focused on KVM features, HDMI input, and compatibility with the LicheeRV Nano SDK, while leaving the inherited audio hardware implicit. Only later did the NanoKVM wiki entry gain explicit wording that the Cube retains display, touch, microphone, and amplifier circuits from the base module, and that newer firmware versions would remove the relevant drivers and future production runs would omit these components entirely.

Sipeed’s public responses combine these two aspects. On the one hand they point to the LicheeRV Nano documentation and the updated NanoKVM wiki as evidence that the microphone is not intended to be secret. On the other hand they argue that, from a threat model perspective, the presence of a board level microphone does not materially change risk once an attacker has obtained full control of the device, since they could already perform sensitive actions through the host system. For critics, the issue is less about the technical possibility of audio capture in a fully compromised scenario and more about expectation and trust: a network attached KVM marketed primarily on its remote control capabilities but not clearly calling out built in audio capture hardware is likely to be treated with more suspicion, especially when it comes from a vendor that has already needed several rounds of security fixes.

Reality Check – How Much of a Concern is this?

From a strict security engineering viewpoint, the onboard microphone in the NanoKVM Cube does not create a new, independent way into the device. An attacker still needs a working exploit, exposed service, or misconfiguration to gain sufficient access before any audio capture is possible. In that sense, the primary risk is still the usual set of issues that apply to any IP KVM: exposed management interfaces, weak credentials, unpatched firmware, or poor network segmentation. If those fundamentals are handled correctly, the probability that a remote attacker can turn the Cube into a listening device is significantly reduced, and using alternative firmware or a locked down software stack can further narrow the options.

The impact side of the equation is different. Once a NanoKVM Cube is compromised at a system level, the presence of a functional microphone increases the potential harm compared with a KVM that only relays keyboard, video, and mouse. A device that sits in a home office, lab, or equipment room and can capture ambient sound can turn a general compromise into a privacy incident that extends beyond the connected host system. For some users that incremental risk will be acceptable if the device is strictly isolated, regularly updated, and treated as an untrusted appliance at the edge of the network. For others, the residual possibility of room audio capture from a small, unattended box may be enough to justify either physical removal of the mic, replacement with a later hardware revision, or avoiding this particular model altogether.

Note. Here is the board view of the NanoKVM USB and NanaKVM Pro PCIe, with no microphone visible:

Asking Sipeed Questions about the NanoKVM Microphone Issue – How and Why This Occurred?

To clarify how the microphone ended up in a shipping KVM product and what Sipeed intends to do about it, I put a series of written questions to the company. The goal was not to reassess the technical findings already covered by independent research, but to obtain clear statements from the vendor on 4 points: how they view the documentation and disclosure around the microphone, which specific NanoKVM variants and hardware revisions include it, what mitigations they believe limit its security and privacy impact for existing deployments, and what concrete changes they are planning for future production runs. The questions and Sipeed’s responses are reproduced in full below. Thanks again to Caesar Wu for his time in answering my questions.

Why was there a microphone on the device, and how/why it’s absent from the documentation?

This premise contains a serious factual error made by the original article. The presence and rationale for the microphone are not undocumented; they are explicitly mentioned on the product’s main Wiki page: https://wiki.sipeed.com/hardware/en/kvm/NanoKVM/introduction.html#NanoKVM

Which Version/Batch/Revisions of NanoKVM feature this Microphone?

The microphone is featured on the NanoKVM Lite and NanoKVM Cube versions. These are derivative products based on the LicheeRV-Nano (RISC-V SBC core module) and consequently inherited its Single Board Computer (SBC) peripherals, including the microphone, speaker, and MIPI touchscreen support.

Is this present on other versions of NanoKVM (i.e PCIe, Pro, USB, etc)?

No. Other products use custom-designed boards dedicated solely to the KVM scenario. They do not reuse the SBC module and therefore do not include non-KVM-essential components.

Why was this microphone not eliminated at the point of production?

The core part of NanoKVM-Cube/Lite is LicheeRV Nano. We reuse LicheeRV Nano as a standard “SOM” in many different products, like AI Camera MaixCAM:    https://www.aliexpress.com/item/1005006912917562.html . And our toB customer also use it as a standard linux core board(Just like RPi CM4, CM5), they are very satisfied with the onboard microphone, speaker, and touch screen.  As stated in my previous email, we maintain that logically, the retention of the microphone on the board does not introduce any negative impact on security. While the onboard components (microphone, speaker power amplifier (PA), and touchscreen connector) introduce a slight increase in Bill of Materials (BoM) cost, this decision significantly simplifies inventory management.

In fact, the base LicheeRV Nano product already comes in 4 configuration variants (Basic, Eth, WiFi, and Ethe+WiFi).  If we were to further segment the inventory by adding options for the presence or absence of the microphone and touchscreen connector, the total number of SKUs  would increase exponentially(the number of SKUs multiplies by two for every added configuration options). Therefore, based on a comprehensive consideration of security, cost efficiency, and inventory management complexity, we maintain the microphone, speaker PA, and touchscreen connector as the default base configuration.

What steps are being taken to ensure that this does not pose a Security/Privacy threat to user who have the nanoKVM in active deployment?

Users must understand the threat model: an attacker can only listen via the onboard mic if the NanoKVM itself has already been fully compromised. The paradox is that once compromised, the attacker already has sufficient privileges to perform high-level operations (include record audio via PC’s own mic). Therefore, the presence of the onboard mic does not increase the inherent security risk of the device. We emphasize that proper network risk awareness and isolation configuration by the user are essential, regardless of whether the device is a NanoKVM, JetKVM, GL.iNet KVM, or PiKVM.

What further steps have been made/planned at Production to avoid this occurring again in future hardware releases?

As stated in Question 4, we plan to remove the microphone in the next batch of the Lite/Cube models purely for psychological comfort and ease of mind for our users. We acknowledge this step will inevitably increase our inventory management complexity due to the need for separate SKUs and production processes. We are also implementing more rigorous hardware audits to ensure compliance with the Principle of Least Privilege in future designs.

Conclusion – Should NanoKVM Owners Be Worried?

For current NanoKVM Cube owners, the level of concern depends largely on how and where the device is deployed. In a well segmented environment where the KVM sits on an isolated management network, with updated firmware and strong access controls, the presence of a dormant microphone on the board is a secondary issue behind the more general risk of any remote management appliance. In small or less structured setups where the NanoKVM has direct exposure to the internet or shares a LAN with everyday client devices, both the historical software weaknesses and the possibility of audio capture in a successful compromise are more relevant factors in deciding whether to keep using the unit unchanged.

Looking ahead, Sipeed has stated that newer firmware removes the audio drivers and that future Lite and Cube batches will omit the microphone and related circuitry entirely, which addresses the concern for new buyers over time. For existing devices, users who are uncomfortable with any residual audio capability have practical options: physically removing or disabling the mic at board level, reflashing with a minimal or community maintained software stack, or replacing the hardware with a later revision or a different KVM platform. The key is to treat the NanoKVM Cube as a high impact management tool rather than a neutral accessory, and to decide whether its cost and feature set justify the additional precautions it requires in a given environment.

Join Inner Circle

Want to follow specific category? Also Read...NanoKVM and it's 'Secret' MicrSipeed NanoKVM Pro KVM ReviewNanoKVM Pro KVM Review - A WHOGL.iNet Comet Pro Review - The Subscribe You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE

Get Graphics Drivers and Hardware Transcoding BACK for Plex/Jellyfin/Emby on your Synology NAS

Note – the video on this fix will be published soon and I will update this article with images ASAP.

Synology’s 2025 refresh brought the DS225+ and DS425+ with the familiar Intel Celeron J4125, but it also quietly removed the kernel graphics driver support that Plex, Jellyfin, and Emby use for hardware transcoding of H.264 and HEVC. This guide explains what changed, why it matters for real-world streaming, and how you can restore GPU-accelerated transcoding on these models using an unofficial SSH method shared by the community. If you rely on your NAS to reshape 4K or high bitrate files for phones, tablets, hotel TVs, or limited connections, this walkthrough will help you get that efficiency back.

IMPORTANT – Massive credit to RROrg group over on Github for ‘cracking the nut’ on this with their latest repo HERE 

Additionally, credit to Luka @ Blackvoid, who made this great article, covered this first and gave me permission to use his guide here and in my upcoming video. Read his article HERE

What Happened to Hardware Transcoding on the Synology 2025 NAS, and Why Is This a Problem

When Synology launched the 2025 “x25” lineup, users expected a minor refresh of familiar models like the DS225+ and DS425+. Instead, they discovered that Synology had removed the i915 graphics driver from DSM, effectively disabling hardware transcoding on the Intel Celeron J4125 CPU. This meant that Plex, Jellyfin, and Emby could no longer tap into the iGPU’s Quick Sync Video capabilities. Synology confirmed the change in support tickets, explaining that both H.264 (AVC) and H.265 (HEVC) transcoding had been deliberately blocked at the kernel driver level. The company cited licensing costs for HEVC, even though AVC is license-free, and argued that most client devices already support native playback. The earliest and longest discucssions on this topic are HERE on this Plex Forum thread.

The result is a significant downgrade for users who bought these models expecting the same multimedia performance as their predecessors. Instead of 10–20% CPU usage during hardware-accelerated transcoding, users now see 80–100% CPU utilization when reshaping video on the fly. For remote streaming, converting 4K to 1080p or 720p becomes slow, inefficient, and often unworkable. This change undermines the value proposition of the J4125 platform and leaves Plex and Jellyfin users with hardware that is technically capable but artificially restricted, creating frustration across the Synology community.

Disclaimer: This Is Unofficial – Know the Risks!

Before diving into the workaround, it is important to understand that this method is not supported by Synology and involves altering core system modules via SSH. These steps rely on community-compiled drivers and are provided “as is,” without warranty. Making changes at the kernel level can cause instability, break after DSM updates, or in the worst case, lead to data loss if mistakes are made. You should always keep verified backups of your data before proceeding, and only attempt this if you are comfortable working with the command line and root-level access. Proceed entirely at your own risk.

Step By Step Guide to Get J41225  Graphics Drivers Hardware Transcoding Back

1. Download the Source Code

   • Go to Dave Russell’s GitHub repo (007revad) and download the Source Code (.zip) for the graphics driver fix.

   • 

   • Do not unpack the archive on your computer.

2. Create a Folder on Your NAS

   • Log into DSM and create a new Shared Folder (e.g. scripts) on your main volume.

   • 

   • Make sure your DSM account has full access, since root privileges will be needed later.

3. Upload the Archive

   • Use File Station or SMB to upload the .zip file into the new scripts shared folder.

   • 

   • Once uploaded, extract it on the NAS by right-clicking and selecting Extract Here.

   • 

   • If extraction creates subfolders, move the relevant script files (such as transcode_4_x25.sh) directly into the main scripts directory for easier referencing.

   • 

4. Create a Scheduled Task

   • Open Control Panel > Task Scheduler.

   • 

   • Select Create > Triggered Task > User-defined Script.

   • 

   • Give the task a name (e.g. Synogfx).

   • 

   • Set the User to root.

   • Set the event to Boot-up so the script runs every time the NAS restarts.

   

5. Point to the Script

   • In the task settings, paste the full path to the script file, for example:

     sh /volume1/scripts/transcode_4_x25.sh


   • If unsure, right-click the .sh file in File Station, select Properties, and copy the full directory path.

   • 

6. Confirm and Save

   • DSM will warn you about using root and non-standard scripts. Acknowledge this and proceed.

   • 

   • Enter your DSM admin password when prompted.

   • The scheduled task will now appear in the list.

   • 

7. Run the Script

   • Right-click the new task and select Run to execute it immediately.

   • 

   • Optionally, reboot your NAS to confirm that the driver loads automatically on startup.

   • 

8. Verify Hardware Transcoding

   • Open Plex (or Jellyfin/Emby) and play a file requiring transcoding.

   • 

   • Check playback statistics: you should now see HW (hardware transcoding) instead of CPU-only usage.

Conclusion

Synology’s decision to remove iGPU drivers from the 2025 DS225+ and DS425+ left many users frustrated, especially those who rely on Plex or Jellyfin for remote streaming. While the company cites licensing costs and client-side decoding as justification, the hardware itself remains fully capable of transcoding. Thanks to community-driven efforts, it is possible to re-enable Quick Sync on these models with an SSH-based workaround. This fix restores the efficiency and functionality users expected, though it comes with risks and requires maintenance after reboots. For multimedia enthusiasts who value hardware transcoding, this unofficial solution may be the only way to unlock the true potential of these NAS systems.

Join Inner Circle

Want to follow specific category? Also Read...Are Synology NAS OK to Buy NowIs It OK Now to Buy Synology NPwn2Own Ireland 2025: SynologyWeek 41 Tech Digest – SynoloSynology DSM 7.3 - Should You Synology DSM 7.3 - Should You Synology DSM 7.3 NAS - HDD/SSDSynology DSM 7.3 NAS - Full DeSYNOLOGY SUPPORT SEAGATE & WD SYNOLOGY REVERSE THE HARD DRIV Subscribe You can also follow specific search terms:

This description contains links to Amazon. These links will take you to some of the products mentioned in today's content. As an Amazon Associate, I earn from qualifying purchases. Visit the NASCompares Deal Finder to find the best place to buy this device in your region, based on Service, Support and Reputation - Just Search for your NAS Drive in the Box Below

Need Advice on Data Storage from an Expert?

TRY CHAT

If you like this service, please consider supporting us. We use affiliate links on the blog allowing NAScompares information and advice service to be free of charge to you.Anything you purchase on the day you click on our links will generate a small commission which isused to run the website. Here is a link for Amazon and B&H.You can also get me a Ko-fi or old school Paypal. Thanks!To find out more about how to support this advice service check HEREIf you need to fix or configure a NAS, check Fiver Have you thought about helping others with your knowledge? Find Instructions Here  

Or support us by using our affiliate links on Amazon UK and Amazon US

    

 

WE LOVE COFFEE