Security Verified
Browse Categories
 Affiliates
 Backup & Restore
 Billing & MyAccount FAQs
 Control Panels
 Customer Tools
 Databases
 Dedicated Servers
 DNS and Domain Registration
 Email
 Glossary
 Network
 News
 PCI Compliance
 Pre-sales FAQ
 Publishing Your Site
 Reseller Tips
 Search Engine Optimization
 Security Topics
 SSL and HTTPS
 Support: Getting Help
 Virtual Desktops
 Virtual Servers
 Website Design & Development
 Website Errors

DotNetNuke Hosting
SQL 2008 R2 / IIS 7.5 Hosting
WordPress Hosting
Forex Trader Hosting
Personal Desktop Hosting

Configuring your FTP client for FTPS

Article ID: 1249

 Back to Search

The following provides instructions for enabling the use of FTPS (FTP over SSL) on common FTP clients.   See the bottom of this article for how to verify you have made an secure connection.

Looking for a recommendation on which FTP client to use?  3Essentials recommends using the FireFTP plug-in for the FireFox web-browser.  It's free, cross-platform, VERY intuitive, easy to configure, and supports FTPS .

SHARED HOSTING customers with a Dedicated IP address.  You FTP configuration is separate from the primary shared IP, therefore before you use FTPS, you'll need to submit a support request asking us to configure the passive port range for the FTP server for your Dedicated IP address, before you can use FTPS (you can actually connect, you just wouldn't be able to retrieve a directory listing).

Other related Articles you may find helpful:


WSFTP
-----------------
WSFTP versions tested: WSFTP Pro
(note WSFTP Home does not support FTPS)

Launch the Connection Wizard, and set the following parameters:
- SiteName: (set to anything you wish to call the connection)
- Connection Type: FTP/SSL (AUTHSSL)
- Server Address: ftp.yourdomain.com (replace yourdomain.com with your actual domain)
- Username: your FTP username
- Password: your FTP password
Click the button for ADVANCED settings, which will open the SITE OPTIONS for this connection.
In the left pane, select ADVANCED and set these parameters:
- USE PASSIVE MODE FOR DATA CONNECTIONS: enable
(all other defaults on this page should be fine)
In the left pane, select ADVANCED:SSL and make sure these options are set as follows:
- USE TLSv1 ONLY: enable
- USE UNENCRYPTED COMMAND CHANNEL AFTER SSL AUTH: disabled
- USE UNECRYPTED DATA CHANNEL: disabled

Click OK/SAVE to save changes.

Click the CONNECT button to launch the connection.

You will be prompted with a pop-up regarding NON-TRUSTED CERTIFICATE, select the option to TRUST THIS CERTIFICATE and click OK.

CoreFTP
-----------------
CoreFTP versions tested: LE v2.1

In Site Manager, set the following parameters:
- SiteName: (set to anything you wish to call the connection)
- host: ftp.yourdomain.com (replace yourdomain.com with your actual domain)
- Username: your FTP username
- Password: your FTP password
- port: 21
- PASV: enable
- Connection: AuthTLS
SSL Options:
- SSL Listings: enabled
- SSL transfer: enabled

Click CONNECT to launch the connection.  You will be prompted with the Certificate information, click the ALWAYS ACCEPT button.

Firefox's FireFTP
-----------------
FireFTP versions tested: 1.0.6, 1.0.7

Set the following parameters:
On the MAIN tab:
- Account Name: (set to anything you wish to call the connection)
- host: ftp.yourdomain.com (replace yourdomain.com with your actual domain)
- Login: your FTP username
- Password: your FTP password
On the CONNECTION tab:
- Security: AuthTLS(Best)
- Port: 21
- Initial Directories-LOCAL: (optional, you can set this to the location of your website files on your local PC)
- Initial Directories-REMOTE: /httpdocs (httpdocs is where you will would need to publish your website files.. optionally, you can place nothing in this field, and it will show you all folders available within your ftproot/hosting space, i.e., cgi-bin, private, statistics, etc).

click OK/SAVE to save the changes.  Click CONNECT to launch the connection.

With FireFTP, you may receive the following warning messages:
- The certificate is only valid for X.X.X.X (the server's IP)
- The certificate does not come from a trusted source

These warnings are ok and expected.  To bypass these warnings and make your connection:
- click the YOU CAN ADD AN EXCEPTION button
- click the ADD EXCEPTION button
- click the GET CERTIFICATE button
- check the box for PERMANENTLY STORE THIS EXCEPTION
- click the CONFIRM SECURITY EXCEPTION button 


Generic FTP client instructions:
-----------------
ftp server/host: ftp.yourdomain.com (replace yourdomain.com with your actual domain)
port: 21
active/passive mode: passive (PASV) or epassive (EPASV)
FTPS/security options: the option for enabling FTPS may be called any of the following:
- AuthTLS
- AuthSSL
- FTP over SSL Explicit
- SSL Explicit
- AuthSSL-Explicit
(where specified, do not chose the "Implicit" option, only the "Explicit" option)

When making your connection, if you receive warning about the certificate, select the option to allow use of the certificate despite the warning.


 

 Verifying your FTPS connection was successfully made in a secure manner:

 When testing an FTPS connection… you can confirm you used SSL by checking the FTP log in your FTP client for the AUTH command (either AUTH SSL or AUTH TLS)… Here’s an example of what FireFTP logs for an FTPS connection:

220 WEB16.3Essentials.com FTPserver ready...
       AUTH TLS
234 AUTH command ok; starting SSL connection.
       PBSZ 0
200 PBSZ=0
       USER 18915
331 Password required for 18915.
       PASS (password not shown)
230 User 18915 logged in.

Versus what it logs for a standard FTP connection:

220 WEB16.3Essentials.com FTPserver ready...
       USER 18915
331 Password required for 18915.
       PASS (password not shown)
230 User 18915 logged in.

Notice the AUTH TLS command was the FIRST thing that was sent by the FTP client software to the FTP server – and the SSL connection was then negotiated and set up BEFORE the user/pw was even sent.

*FTP over SSL is not available on the following servers: web14, web12, web10, web8, web6, web4, web2, web5, web7.  If you are hosted on one of these servers and wish to use FTPS for file transfer, please contact the support team who will provide you options on moving to a server which supports this.

 

 
Downloads Associated With This Article
No downloads are currently associated with this article.

© 2001 - 2012 3Essentials Inc.
Terms Of Service | Privacy Policy | Copyright Policy | Affiliates