How To Create Ftp Site In Windows Server 2008

Documentation » Using WinSCP » Guides » Other »

Installing a secure FTP server on Windows using IIS

Yous may want to install a secure FTP server on Windows either as standalone file storage or to have means of editing your website hosted on IIS (Internet Information Services) spider web server. In both cases, y'all can utilise an optional FTP Server component of the IIS. Information technology can be installed standalone or along with a Spider web Server.1

• Installing FTP Server
  • On Windows Server 2022, Windows Server 2019, Windows Server 2016 and Windows Server 2012
  • On Windows Server 2008 R2
  • On Windows Desktop (Windows 11, Windows 10, Windows 8, Windows vii and Windows Vista)
• Opening IIS Manager
• Creating Certificate for the FTPS Server
• Servers behind external Firewall/NAT
• Windows Firewall Rules
• Restarting FTP Service
• Adding FTP Site
  • To a Web Site
  • Standalone FTP Site
• Connecting to Your FTPS Server
• Farther reading

Installing FTP Server

On Windows Server 2022, Windows Server 2019, Windows Server 2016 and Windows Server 2012

• In Windows Server Manager go to Dashboard and run Manage > Add together Roles and Features.

Advertisement

• In Add Roles and Features sorcerer:
  • Proceed to Installation Type pace and confirm Role-based or feature-based installation.
  • Proceed to Server Roles stride and cheque Web Server (IIS) role. Note that it is checked already, if you had IIS installed as a Spider web Server previously. If your are prompted to install IIS Direction Console tool, confirm information technology.
  • Keep to Web Server Office (IIS) > Role Services step and cheque FTP Server role service. Uncheck Web Server role service, if yous do not need it.
  • Proceed to the end of the wizard and click Install.
  • Wait for the installation to complete.

Advertisement

Skip to the next step.

On Windows Server 2008 R2

If you do not have IIS installed still:

• In Windows Server Director go to Roles node and in Roles Summary panel click Add Roles.
• In Add together Roles magician:
  • Proceed to Server Roles pace and cheque Web Server (IIS) role.
  • Go on to Function Services step and check FTP Server > FTP Service role service. Uncheck Web Server office service, if y'all practise non need it. Make sure Management Service > IIS Direction Console part service is checked.
  • Continue to the end of the wizard and click Install.
  • Wait for the installation to complete.

If you lot have IIS installed already (i.e. equally a Spider web Server):

• In Windows Server Manager become to Roles node and in Spider web Server (IIS) > Role Services panel click Add Role Services.
• In Add Role Services wizard:
  • Cheque FTP Server > FTP Service role service.
  • Brand certain that Management Service > IIS Management Console is checked.
  • Ostend with Next button.
  • Proceed to the end of the magician and click Install.
  • Wait for the installation to complete.

Advertisement

Skip to the next pace.

On Windows Desktop (Windows eleven, Windows 10, Windows 8, Windows 7 and Windows Vista)

• Go to Command Panel > Programs > Programs and Features > Turn Windows features on or off.
• On a Windows Features window:
  • Expand Internet Data Services > FTP Server and check FTP Service.
  • Aggrandize Internet Data Services > Web Management Tools and check IIS Management Console, if it is not checked yet.
  • Confirm with OK button.
  • Wait for the installation to complete.

Opening IIS Manager

• Get to Control Panel > Arrangement and Security > Administrative Tools (Windows Tools on Windows 11) and open Net Information Services (IIS) Manager.
• Navigate to your Windows server node.

Advertisement

Creating Document for the FTPS Server

Yous need a TLS/SSL certificate to secure your FTP server. Ideally, you should acquire the certificate from a certificate authority.

Y'all may also create a self-signed certificate locally, only in such case users of your FTPS server will be warned, when connecting to the server.

To create the self-signed document:

• In IIS Director, open IIS > Server Certificates.
• Click on Create Self-Signed Certificate activeness.
• Specify a certificate proper name (e.k. "FTP Server") and submit with OK.

Self-signed certificates created by former versions of IIS Managing director exercise not work with FTPS clients that check for key usage violations.2 To create a certificate with a correct key usage, utilize New-SelfSignedCertificate PowerShell every bit an Ambassador:

            New-SelfSignedCertificate            -FriendlyName            "FTP Server"            -CertStoreLocation cert:\localmachine\my -DnsName ftp.example.com

Servers backside external Firewall/NAT

If your server is behind an external firewall/NAT, you need to tell the FTP server its external IP address, to allow passive fashion connections.

• In IIS Manager, open FTP > FTP Firewall Support.
• Specify your server's external IP accost.
  For Microsoft Azure Windows servers yous will notice the external IP address in Public IP address section of the virtual machine folio.

When behind an external firewall, you need to open up ports for data connections (plainly in addition to opening an FTP port 21 and possibly an implicit TLS/SSL FTP port 990). Y'all won't probably want to open whole default port range 1024-65535. In such case, you need to tell the FTP server to use merely the range that is opened on the firewall. Use a Data Aqueduct Port Range box for that. Any fourth dimension you change this range, yous volition need to restart FTP service. Learn how to open ports on Microsoft Azure.

Advertizing

Click Use action to submit your settings.

Some external firewalls are able to monitor FTP control connection and automatically open and close the data connection ports as needed. So y'all do not need to have whole port range opened all the time, even when non in employ. This won't work with the secure FTPS equally the control connection is encrypted and the firewall cannot monitor it.

Windows Firewall Rules

An internal Windows firewall is automatically configured with rules for the ports 21, 990 and 1024-65535 when IIS FTP server is installed.

The rules are not enabled initially on some versions of Windows.3 To enable or change the rules, go to Control Panel > System and Security > Windows Defender Firewall4 > Advanced Settings > Entering Rules and locate iii "FTP server" rules. If the rules are non enabled, click on Actions > Enable Rule.

Restarting FTP Service

While the internal Windows firewall is automatically configured to open up FTP ports when FTP server is installed, this change does non seem to apply, until FTP service is restarted. The same is true for changing data aqueduct port range.

To restart FTP service get to Control Panel > System and Security > Administrative Tools (Windows Tools on Windows 11) and open Services. Locate Microsoft FTP Service and click Restart service.5

Adding FTP Site

To a Spider web Site

If you want to add FTP server to manage your existing spider web site remotely, locate your web site node in IIS Director and:

• Click Add FTP Publishing action.
• In Add FTP Site Publishing magician:
  • On an initial Bounden and SSL Settings step, select Require SSL to disallow non-encrypted connections and select your certificate.
  • On Authentication and Authorization Information step, select Basic authentication and make certain Anonymous hallmark is not selected. Select which users (Windows accounts) yous allow to connect to the server with what permissions. You can cull All users or select just some. Practice not select Bearding users.
  • Submit with End push button.

Advertisement

Your secure FTPS server is now running and can exist connected to.

Standalone FTP Site

If you want to add a standalone FTP server to store/exchange files, locate Sites node (folder) of your Windows server in IIS Managing director and:

• Click Add FTP Site action.
• In Add together FTP Site wizard:
  • On an initial Site Information step, give a proper noun to your FTP site (if it'due south the but site you are going to have, uncomplicated "FTP site" suffice) and specify a path to a folder on your server'southward disk that is going to be attainable using FTP.
  • On a Binding and SSL Settings step, select Require SSL to disallow non-encrypted connections and select your certificate.
  • On Authentication and Authorization Information stride, select Bones authentication and make sure Bearding authentication is non selected. Select which users (Windows accounts) yous allow to connect to the server with what permissions. You lot can choose All users or select only some. Do not select Anonymous users.
  • Submit with Finish push button.

Your secure FTPS server is now running and can exist connected to.

Connecting to Your FTPS Server

For connecting to a Microsoft Azure Windows instance, see a specific guide.

Beginning WinSCP. Login Dialog will appear. On the dialog:

• Select FTP protocol and TLS/SSL Explicit encryption.
• Enter your Windows server hostname to Host proper noun field. Avoid using an IP accost to allow WinSCP to verify that the hostname matches with host the server's document was issued to (not applicable to cocky-signed certificates).
• Specify username and password for Windows business relationship y'all want to connect with (when using domain accounts, you need to specify a full username with format domain\username).
• You may want to save your session details to a site so you do non demand to type them in every time y'all want to connect. Printing Salve button and type site name.
• Printing Login to connect.
• If you are using self-signed certificate, yous will be prompted to take it.

Advert

Further reading

• Installing secure FTP server on Microsoft Azure using IIS;
• Installing SFTP/SSH Server on Windows using OpenSSH;
• Upload files to FTP server or SFTP server;
• Automate file transfers (or synchronization) to FTP server or SFTP server.

Source: https://winscp.net/eng/docs/guide_windows_ftps_server

Posted by: showersweeme1988.blogspot.com

Share this post