Skip to main content

How to disable Online Dashboard? (which opens whole file and folder structure to the internet)

Thread needs solution

I was quite shocked when I just upgraded from 2017 to the latest 2021 trial and I discovered the "Online Dashboard".

I didn't confirm (at least not user friendly) to make my entire hard dive browsable online. Having file and folder names shared with a cloud service is nothing i'm comfortable with.

I have to ask myself what else is shared running this software? The level of transparency is shocking that you would run a file server to share with your service without clear user permission.

How can I disable this huge security risk?

0 Users found this helpful

Andi, sorry but the Acronis Online Dashboard does not make your entire hard drive browsable online even if you have a subscription for the Acronis Cloud storage service.  The Dashboard is a feature that has been around for many years since being introduced first in ATI 2016 and there would have been an absolute uproar if it exposed user data in the way you suggest!

The Dashboard is protected by your own Acronis account and password credentials, it is private only to you or anyone that you give access to.  Your backups are not stored in the Dashboard itself unless you have created backups to the Acronis Cloud, and if doing so, you should be using the password encryption for those backups for double protection. Protected backups in the Cloud / Dashboard show with a padlock icon and cannot be opened without providing the encrypting password only known to the user.

If you don't want your devices shown in the Dashboard, then click on the gear cog icon to the right of the device name and select Delete from the drop down menu options and it will no longer shown unless you uninstall / reinstall ATI 2021.

See KB 56529: Acronis True Image Cloud: Online Dashboard for more information.

Edit: added missing 'not' to initial sentence above.

Hi Steve

Not sure why you would suggest my statement wouldn't be true.

I said it opens up your storage to the internet which is completely true since it makes sensetive data accessible from outside your local network. Which i don't think a lot of people would be so relaxed with if they would knew. I agree, that is only my expectation which could be wrong.

That you assume Acronis wouldn't be a target of a cyber attack is solely your expectation but has been proven numerous times false with other big companies. I would even claim Acronis as a hoster of peoples backup worthy sensitive data would be a target.

Everyone has to make that decision for himself.

Removing the client in the dashboard is probably not preventing the service to serve the data. (which btw is not working for me as long as the client is connected)

The service that servers your hard drive is called mmsminisrv. Looks like disabeling it solves the problem and hopefully keeps the rest running.

Thanks for the quick response.

Attachment Size
566827-211310.png 13.59 KB
566827-211313.png 16.72 KB

I said it opens up your storage to the internet which is completely true since it makes sensitive data accessible from outside your local network. Which i don't think a lot of people would be so relaxed with if they would knew. I agree, that is only my expectation which could be wrong.

Andi, any data being made accessible is only available to the end user after the correct security credentials have been entered.  There is no public access to that data unless the user makes a conscious decision to provide an insecure link that gives such!

That you assume Acronis wouldn't be a target of a cyber attack is solely your expectation but has been proven numerous times false with other big companies. I would even claim Acronis as a hoster of peoples backup worthy sensitive data would be a target.

I can see no evidence that I was making any such assumption from my earlier comments!

I am not aware of any evidence to suggest that there have been any cyber attacks against the Acronis servers or those for any of the other major cloud services (OneDrive, Google Drive, Dropbox, Box, iCloud etc), but I doubt that they would be eager to publish such information either.  I would assume that there are plenty of aspiring hackers, including crime syndicates and state sponsored groups, that engage in regular probes of these services in the hope of finding any vulnerabilities etc.

Given that Acronis are promoting themselves as a premier contender in the Cyber Protection arena, I very much do expect that they follow their own advice in terms of protecting their data centres, servers, systems etc with both physical and data protection and redundancy measures, with all normal measures in place to mitigate against any attack or loss of data etc.

Removing the client in the dashboard is probably not preventing the service to serve the data. (which btw is not working for me as long as the client is connected)

The service that servers your hard drive is called mmsminisrv. Looks like disabeling it solves the problem and hopefully keeps the rest running.

Removing the client in the Dashboard is the best method that I would recommend using as this does remove all evidence that there has been any connection between that client and the Acronis servers.

Disabling the Acronis Managed Machine Mini service on the client can be a temporary solution only, as this would be re-enabled again by installing any new build or version of ATI, or if needing to do a Repair or Full re-Install of ATI.

There are also new dependencies between services in ATI 2021 with the new aakore service that uses the MMMS service.