How To Install Ftp In Windows Server 2012

Documentation » Using WinSCP » Guides » Other »

Installing a secure FTP server on Windows using IIS

You lot may want to install a secure FTP server on Windows either equally standalone file storage or to take ways of editing your website hosted on IIS (Internet Information Services) web server. In both cases, y'all can use an optional FTP Server component of the IIS. It can be installed standalone or along with a Web Server.1

Installing FTP Server
- On Windows Server 2022, Windows Server 2022, Windows Server 2022 and Windows Server 2022
- On Windows Server 2008 R2
- On Windows Desktop (Windows xi, Windows x, Windows 8, Windows seven and Windows Vista)
Opening IIS Manager
Creating Certificate for the FTPS Server
Servers backside external Firewall/NAT
Windows Firewall Rules
Restarting FTP Service
Adding FTP Site
- To a Web Site
- Standalone FTP Site
Connecting to Your FTPS Server
Further reading

Installing FTP Server

On Windows Server 2022, Windows Server 2022, Windows Server 2022 and Windows Server 2022

In Windows Server Manager go to Dashboard and run Manage > Add together Roles and Features.

In Add Roles and Features sorcerer:
- Go along to Installation Blazon step and confirm Office-based or characteristic-based installation.
- Proceed to Server Roles footstep and cheque Web Server (IIS) role. Annotation that it is checked already, if you lot had IIS installed as a Web Server previously. If your are prompted to install IIS Direction Console tool, confirm it.
- Proceed to Web Server Function (IIS) > Role Services step and bank check FTP Server role service. Uncheck Web Server role service, if you do not need it.
- Proceed to the end of the wizard and click Install.
- Await for the installation to complete.

Skip to the next stride.

On Windows Server 2008 R2

If you exercise not have IIS installed all the same:

In Windows Server Manager go to Roles node and in Roles Summary panel click Add Roles.
In Add together Roles magician:
- Proceed to Server Roles pace and cheque Web Server (IIS) role.
- Proceed to Part Services step and check FTP Server > FTP Service role service. Uncheck Spider web Server role service, if yous practice not demand information technology. Brand sure Direction Service > IIS Direction Console role service is checked.
- Continue to the end of the wizard and click Install.
- Look for the installation to consummate.

If y'all have IIS installed already (i.e. as a Spider web Server):

In Windows Server Manager go to Roles node and in Web Server (IIS) > Office Services panel click Add together Office Services.
In Add Role Services wizard:
- Cheque FTP Server > FTP Service office service.
- Make sure that Management Service > IIS Management Console is checked.
- Confirm with Adjacent push button.
- Keep to the stop of the wizard and click Install.
- Wait for the installation to consummate.

Skip to the side by side stride.

On Windows Desktop (Windows eleven, Windows 10, Windows viii, Windows 7 and Windows Vista)

Go to Command Panel > Programs > Programs and Features > Turn Windows features on or off.
On a Windows Features window:
- Expand Internet Data Services > FTP Server and check FTP Service.
- Expand Internet Information Services > Web Management Tools and cheque IIS Direction Console, if it is not checked all the same.
- Confirm with OK button.
- Look for the installation to consummate.

Opening IIS Manager

Go to Control Panel > Organisation and Security > Administrative Tools (Windows Tools on Windows 11) and open Internet Data Services (IIS) Manager.
Navigate to your Windows server node.

Creating Certificate for the FTPS Server

You need a TLS/SSL document to secure your FTP server. Ideally, you should acquire the certificate from a document authority.

You may also create a self-signed certificate locally, only in such instance users of your FTPS server will be warned, when connecting to the server.

To create the self-signed certificate:

In IIS Manager, open up IIS > Server Certificates.
Click on Create Self-Signed Certificate action.
Specify a certificate name (e.g. "FTP Server") and submit with OK.

Self-signed certificates created by old versions of IIS Manager exercise non work with FTPS clients that check for fundamental usage violations.ii To create a certificate with a correct fundamental usage, use New-SelfSignedCertificate PowerShell as an Administrator:

            New-SelfSignedCertificate            -FriendlyName            "FTP Server"            -CertStoreLocation cert:\localmachine\my -DnsName ftp.example.com

Servers behind external Firewall/NAT

If your server is behind an external firewall/NAT, you demand to tell the FTP server its external IP address, to allow passive style connections.

In IIS Manager, open up FTP > FTP Firewall Support.
Specify your server'south external IP address.
For Microsoft Azure Windows servers you lot will observe the external IP accost in Public IP address section of the virtual auto page.

When behind an external firewall, yous need to open ports for information connections (apparently in addition to opening an FTP port 21 and possibly an implicit TLS/SSL FTP port 990). Y'all won't probably want to open whole default port range 1024-65535. In such case, you need to tell the FTP server to apply just the range that is opened on the firewall. Use a Information Channel Port Range box for that. Any time y'all modify this range, you will demand to restart FTP service. Learn how to open ports on Microsoft Azure.

Click Apply action to submit your settings.

Some external firewalls are able to monitor FTP command connexion and automatically open and close the information connexion ports as needed. So y'all do not demand to have whole port range opened all the time, even when non in use. This won't work with the secure FTPS as the command connection is encrypted and the firewall cannot monitor information technology.

Windows Firewall Rules

An internal Windows firewall is automatically configured with rules for the ports 21, 990 and 1024-65535 when IIS FTP server is installed.

The rules are not enabled initially on some versions of Windows.3 To enable or change the rules, become to Control Panel > System and Security > Windows Defender Firewall4 > Advanced Settings > Inbound Rules and locate three "FTP server" rules. If the rules are not enabled, click on Deportment > Enable Rule.

Restarting FTP Service

While the internal Windows firewall is automatically configured to open FTP ports when FTP server is installed, this alter does non seem to apply, until FTP service is restarted. The same is true for changing data channel port range.

To restart FTP service go to Control Panel > Arrangement and Security > Administrative Tools (Windows Tools on Windows 11) and open Services. Locate Microsoft FTP Service and click Restart service.5

Adding FTP Site

To a Spider web Site

If yous want to add FTP server to manage your existing web site remotely, locate your web site node in IIS Managing director and:

Click Add together FTP Publishing action.
In Add FTP Site Publishing wizard:
- On an initial Bounden and SSL Settings footstep, select Require SSL to disallow non-encrypted connections and select your document.
- On Hallmark and Dominance Information pace, select Basic authentication and brand sure Anonymous hallmark is not selected. Select which users (Windows accounts) you permit to connect to the server with what permissions. You can choose All users or select but some. Practice not select Anonymous users.
- Submit with Stop button.

Your secure FTPS server is now running and can be continued to.

Standalone FTP Site

If you want to add a standalone FTP server to store/substitution files, locate Sites node (binder) of your Windows server in IIS Manager and:

Click Add together FTP Site action.
In Add FTP Site magician:
- On an initial Site Information step, give a name to your FTP site (if it'south the only site y'all are going to have, simple "FTP site" suffice) and specify a path to a folder on your server'due south disk that is going to be attainable using FTP.
- On a Binding and SSL Settings step, select Crave SSL to disallow non-encrypted connections and select your certificate.
- On Authentication and Dominance Information stride, select Basic hallmark and make certain Anonymous authentication is not selected. Select which users (Windows accounts) you permit to connect to the server with what permissions. You tin choose All users or select merely some. Do not select Anonymous users.
- Submit with Cease button.

Your secure FTPS server is now running and can be continued to.

Connecting to Your FTPS Server

For connecting to a Microsoft Azure Windows instance, see a specific guide.

Get-go WinSCP. Login Dialog will appear. On the dialog:

Select FTP protocol and TLS/SSL Explicit encryption.
Enter your Windows server hostname to Host name field. Avoid using an IP accost to allow WinSCP to verify that the hostname matches with host the server's certificate was issued to (not applicative to self-signed certificates).
Specify username and password for Windows account you desire to connect with (when using domain accounts, you demand to specify a full username with format domain\username).
You may want to save your session details to a site and then you practice not demand to type them in every time yous want to connect. Press Save button and blazon site name.
Printing Login to connect.
If yous are using self-signed certificate, yous will exist prompted to accept it.

Farther reading

Installing secure FTP server on Microsoft Azure using IIS;
Installing SFTP/SSH Server on Windows using OpenSSH;
Upload files to FTP server or SFTP server;
Automate file transfers (or synchronization) to FTP server or SFTP server.

Source: https://winscp.net/eng/docs/guide_windows_ftps_server

Posted by: lanoueproatest40.blogspot.com