How To Install Ftp On Windows Server 2012

Documentation » Using WinSCP » Guides » Other »

Installing a secure FTP server on Windows using IIS

You may want to install a secure FTP server on Windows either equally standalone file storage or to take means of editing your website hosted on IIS (Internet Data Services) spider web server. In both cases, y'all can use an optional FTP Server component of the IIS. It can exist installed standalone or forth with a Web Server.1

• Installing FTP Server
  • On Windows Server 2022, Windows Server 2022, Windows Server 2022 and Windows Server 2022
  • On Windows Server 2008 R2
  • On Windows Desktop (Windows 11, Windows ten, Windows 8, Windows 7 and Windows Vista)
• Opening IIS Manager
• Creating Certificate for the FTPS Server
• Servers backside external Firewall/NAT
• Windows Firewall Rules
• Restarting FTP Service
• Adding FTP Site
  • To a Web Site
  • Standalone FTP Site
• Connecting to Your FTPS Server
• Further reading

Installing FTP Server

On Windows Server 2022, Windows Server 2022, Windows Server 2022 and Windows Server 2022

• In Windows Server Manager become to Dashboard and run Manage > Add Roles and Features.

Advertisement

• In Add together Roles and Features magician:
  • Continue to Installation Blazon step and ostend Function-based or feature-based installation.
  • Proceed to Server Roles footstep and check Web Server (IIS) role. Note that information technology is checked already, if you had IIS installed every bit a Spider web Server previously. If your are prompted to install IIS Direction Panel tool, confirm it.
  • Keep to Spider web Server Role (IIS) > Office Services stride and check FTP Server office service. Uncheck Web Server role service, if y'all exercise not need it.
  • Proceed to the finish of the magician and click Install.
  • Wait for the installation to complete.

Advert

Skip to the adjacent stride.

On Windows Server 2008 R2

If you lot do non have IIS installed yet:

• In Windows Server Manager become to Roles node and in Roles Summary panel click Add together Roles.
• In Add Roles wizard:
  • Continue to Server Roles step and bank check Web Server (IIS) role.
  • Proceed to Role Services step and check FTP Server > FTP Service role service. Uncheck Web Server role service, if you do non need it. Make sure Management Service > IIS Management Panel office service is checked.
  • Go on to the end of the magician and click Install.
  • Expect for the installation to consummate.

If you take IIS installed already (i.e. as a Web Server):

• In Windows Server Manager become to Roles node and in Web Server (IIS) > Office Services panel click Add Office Services.
• In Add together Role Services wizard:
  • Cheque FTP Server > FTP Service role service.
  • Make sure that Direction Service > IIS Management Console is checked.
  • Ostend with Next push button.
  • Proceed to the end of the wizard and click Install.
  • Wait for the installation to complete.

Advertisement

Skip to the next stride.

On Windows Desktop (Windows eleven, Windows 10, Windows 8, Windows 7 and Windows Vista)

• Become to Control Panel > Programs > Programs and Features > Plow Windows features on or off.
• On a Windows Features window:
  • Expand Net Data Services > FTP Server and cheque FTP Service.
  • Aggrandize Internet Information Services > Web Direction Tools and check IIS Management Console, if it is non checked yet.
  • Confirm with OK button.
  • Expect for the installation to complete.

Opening IIS Director

• Get to Control Panel > Organisation and Security > Authoritative Tools (Windows Tools on Windows xi) and open up Internet Information Services (IIS) Managing director.
• Navigate to your Windows server node.

Advertisement

Creating Certificate for the FTPS Server

You need a TLS/SSL document to secure your FTP server. Ideally, you should acquire the certificate from a certificate authority.

You may as well create a cocky-signed document locally, but in such example users of your FTPS server will be warned, when connecting to the server.

To create the self-signed document:

• In IIS Director, open up IIS > Server Certificates.
• Click on Create Self-Signed Certificate action.
• Specify a certificate name (e.g. "FTP Server") and submit with OK.

Self-signed certificates created past old versions of IIS Manager do not work with FTPS clients that cheque for central usage violations.2 To create a certificate with a correct cardinal usage, use New-SelfSignedCertificate PowerShell equally an Administrator:

            New-SelfSignedCertificate            -FriendlyName            "FTP Server"            -CertStoreLocation cert:\localmachine\my -DnsName ftp.instance.com

Servers backside external Firewall/NAT

If your server is behind an external firewall/NAT, y'all need to tell the FTP server its external IP address, to allow passive mode connections.

• In IIS Manager, open FTP > FTP Firewall Support.
• Specify your server'south external IP address.
  For Microsoft Azure Windows servers you will notice the external IP accost in Public IP address section of the virtual machine page.

When behind an external firewall, y'all demand to open up ports for data connections (apparently in improver to opening an FTP port 21 and perchance an implicit TLS/SSL FTP port 990). You lot won't probably want to open whole default port range 1024-65535. In such case, you need to tell the FTP server to use only the range that is opened on the firewall. Use a Data Channel Port Range box for that. Whatsoever time you lot change this range, you will need to restart FTP service. Learn how to open up ports on Microsoft Azure.

Advertisement

Click Apply action to submit your settings.

Some external firewalls are able to monitor FTP control connection and automatically open and close the data connection ports as needed. Then you do non need to accept whole port range opened all the time, even when non in apply. This won't work with the secure FTPS equally the control connection is encrypted and the firewall cannot monitor it.

Windows Firewall Rules

An internal Windows firewall is automatically configured with rules for the ports 21, 990 and 1024-65535 when IIS FTP server is installed.

The rules are not enabled initially on some versions of Windows.three To enable or change the rules, go to Control Panel > Arrangement and Security > Windows Defender Firewalliv > Advanced Settings > Entering Rules and locate iii "FTP server" rules. If the rules are not enabled, click on Actions > Enable Rule.

Restarting FTP Service

While the internal Windows firewall is automatically configured to open FTP ports when FTP server is installed, this alter does non seem to utilise, until FTP service is restarted. The aforementioned is true for irresolute data channel port range.

To restart FTP service go to Control Panel > Arrangement and Security > Authoritative Tools (Windows Tools on Windows eleven) and open Services. Locate Microsoft FTP Service and click Restart service.5

Calculation FTP Site

To a Web Site

If you want to add FTP server to manage your existing web site remotely, locate your web site node in IIS Manager and:

• Click Add FTP Publishing activeness.
• In Add together FTP Site Publishing wizard:
  • On an initial Binding and SSL Settings step, select Require SSL to disallow non-encrypted connections and select your certificate.
  • On Authentication and Authorization Information pace, select Basic authentication and make certain Anonymous authentication is not selected. Select which users (Windows accounts) you allow to connect to the server with what permissions. You tin can choose All users or select only some. Practice non select Anonymous users.
  • Submit with Finish button.

Advertisement

Your secure FTPS server is now running and can be continued to.

Standalone FTP Site

If you want to add a standalone FTP server to store/exchange files, locate Sites node (folder) of your Windows server in IIS Manager and:

• Click Add FTP Site activity.
• In Add FTP Site wizard:
  • On an initial Site Information step, give a proper name to your FTP site (if information technology's the simply site you are going to have, elementary "FTP site" suffice) and specify a path to a folder on your server's deejay that is going to be attainable using FTP.
  • On a Bounden and SSL Settings step, select Require SSL to disallow non-encrypted connections and select your document.
  • On Authentication and Authorization Information step, select Basic authentication and make certain Anonymous hallmark is non selected. Select which users (Windows accounts) yous allow to connect to the server with what permissions. You lot can choose All users or select only some. Exercise not select Anonymous users.
  • Submit with Finish push.

Your secure FTPS server is now running and can be connected to.

Connecting to Your FTPS Server

For connecting to a Microsoft Azure Windows instance, meet a specific guide.

Start WinSCP. Login Dialog will announced. On the dialog:

• Select FTP protocol and TLS/SSL Explicit encryption.
• Enter your Windows server hostname to Host name field. Avoid using an IP accost to allow WinSCP to verify that the hostname matches with host the server'southward document was issued to (not applicable to cocky-signed certificates).
• Specify username and countersign for Windows account you want to connect with (when using domain accounts, you lot need to specify a full username with format domain\username).
• Yous may want to salve your session details to a site so yous practice not demand to type them in every fourth dimension you want to connect. Press Save push and blazon site proper noun.
• Press Login to connect.
• If you are using self-signed certificate, you will be prompted to accept it.

Advertisement

Further reading

• Installing secure FTP server on Microsoft Azure using IIS;
• Installing SFTP/SSH Server on Windows using OpenSSH;
• Upload files to FTP server or SFTP server;
• Automate file transfers (or synchronization) to FTP server or SFTP server.

Source: https://winscp.net/eng/docs/guide_windows_ftps_server

Posted by: raynaticepled.blogspot.com

Share this post