FTP SSL Settings

  • Article

 

Applies To: Windows Server 2012 R2, Windows Server 2012

Use the FTP SSL Settings feature page to manage encryption for both control channel and data channel transmissions between your FTP server and clients.

Note

These settings work in both intranet and internet environments.

Related scenarios

In this document

UI Elements for FTP SSL Settings

The following tables describe the UI elements that are available on the feature page and in the Actions pane.

Feature Page Elements

Element Name

Description

SSL Certificate

Specifies the SSL certificate that you want to use for SSL.

Note

Selecting an SSL certificate enables SSL for a specific FTP site or FTP server. To disable SSL, select Not Selected from the drop-down list.

View

Opens the Certificate dialog box for the selected certificate.

Allow SSL Connections

Select this setting to allow data encryption for both the control channel and data channel when an SSL certificate is selected.

Require SSL Connections

Select this setting to require data encryption for both the control channel and data channel when an SSL certificate is selected.

Note

SSL requires additional processor time and slows down data transmissions because of the additional encryption data that must be transmitted.

Custom

Select this setting to customize the individual data encryption requirements for the control channel and data channel when an SSL certificate is selected.

Note

Selecting the Custom option enables the Advanced button; clicking Advanced will display the Advanced SSL Policy dialog box.

Use 128-bit encryption for SSL connections

Select this setting to require stronger encryption. You can use 128–bit SSL to help secure transmissions between your FTP server and clients in either an intranet or internet environment.

Note

128–bit SSL requires more processor time and slows down data transmissions more than the 40–bit version does. This setting is because 128–bit SSL transmits additional encryption data to provide stronger encryption. Therefore, before requiring 128–bit SSL, make sure that your data transmissions need stronger encryption.

Actions Pane Elements

Element Name

Description

Apply

Saves the changes that you have made on the feature page.

Cancel

Cancels the changes that you have made on the feature page.

Advanced SSL Policy Dialog Box

Use the Advanced SSL Policy dialog box to customize the individual data encryption requirements for the control channel and data channel between your FTP server and clients.

Element Name

Description

Control Channel: Allow

Specifies that data encryption is allowed for the control channel. This option allows the client to choose whether to use SSL for the control channel.

Control Channel: Require

Specifies that data encryption is required for the control channel. This option causes all clients to use SSL for all activity on the control channel.

Control Channel: Require only for credentials

Specifies that data encryption is required for the control channel only when user credentials are transmitted.

Note

Selecting this option causes all clients to use SSL for the control channel when user credentials are transmitted, and then allows the client to choose whether to continue to use SSL for the control channel.

Data Channel: Allow

Specifies that data encryption is allowed for the data channel. This option allows the client to choose whether to use SSL for the data channel.

Data Channel: Require

Specifies that data encryption is required for the data channel. This option causes all clients to use SSL for all activity on the data channel.

Data Channel: Deny

Specifies that data encryption is denied for the data channel. This option explicitly denies the use of SSL for all activity on the data channel.