Simple Application Server:Set up an FTP server (Windows)

Step 1: Add Internet Information Services (IIS) and FTP server roles

Ensure that IIS and FTP services are added to your instance. If not, perform the following steps to add them.

1. Connect to the Windows simple application server.

   For more information, see Connect to a Windows server.

2. In the lower-left corner of the Windows desktop, click the icon and click Server Manager.

3. In the top navigation bar, choose Manage > Add Roles and Features.

   

4. In the Before you begin dialog box, click Next.

5. Select Web Server (IIS). In the dialog box that appears, click Add Features and click Next.

   

   

6. Keep defaults and click Next until you reach the Select role services page.

7. Select IIS Management Console and FTP Server, and click Next.

   

8. Click Install. After installation completes, click Close.

(Optional) Step 2: Create a Windows user to access the FTP site

Create a Windows user for FTP authentication. Skip this step if only anonymous users (username anonymous or ftp) need access.

1. In Server Manager, choose Tools > Computer Management.

   

2. In the left navigation pane, choose System Tools > Local Users and Groups > User. Right-click a blank area and select New User.

   

3. In the pop-up window, set User Name and Password.

   Configuration details:

   • User name: Example: ftptest.

   • Password and Confirm password: Enter a custom password.

     Note

     The password must contain uppercase letters, lowercase letters, and digits. Keep your password secure to prevent security risks.

   • Password-related settings: Select Password never expires.

4. Click Create and close the New User dialog box.

Step 3: Set permissions for the shared folder

Create a shared folder for the FTP site and configure its permissions. All file transfers occur within this folder.

1. Create a folder on the Windows instance for the FTP site.

   Example: Create a folder named work on the C drive.

2. Right-click the work folder and select Properties (R).

3. Click the Security tab, select Everyone, and click Modify.

   If Everyone is not listed, add it first. See What do I do if the Everyone option is missing when I set folder permissions?.

   

4. Select Everyone, select the required permissions, and click OK.

   This example grants all permissions.

   

Step 4: Add and configure the FTP site

1. In the lower-left corner of the Windows desktop, click the icon and click Server Manager.

2. In the top navigation bar, choose Tools > Internet Information Services (IIS) Manager.

   

3. In the left navigation pane, choose <Hostname of the Windows instance> > Sites. In the Actions pane, click Add FTP Site.

   

4. Set the site information and click Next.

   Configuration details:

   • FTP site name: A custom name, such as ftptest.

   • Content Directory: The shared folder. Example: the ftp folder on drive C.

5. Set the IP address and SSL certificate, and click Next.

   Configuration details:

   • IP Address: Keep the default.

   • SSL: This example selects No SSL. To secure data transfers with an existing SSL certificate, select Allow SSL or Require SSL.

     • No SSL: No SSL encryption.

     • Allow SSL: Supports both non-SSL and SSL connections.

     • Require SSL: Requires SSL encryption for all FTP connections.

   • Keep defaults for other items.

     Note

     If you select Allow or Yes, you must select an SSL certificate. See Creating a server certificate.

6. Set authentication and authorization, and click Finish.

   Configuration details:

   • Authentication: This example selects Basic to use the ftptest user. Select Anonymous to allow anonymous access without data security requirements.

     • Anonymous: Allows access with the username anonymous or ftp.

     • Basic: Requires a valid username and password. Because basic authentication transmits unencrypted passwords, use it only when the connection is secure, such as with SSL.

   • Authorization: This example selects Specified users and enters ftptest.

     • All users: All users, anonymous or identified, can access the shared folder.

     • Anonymous users: Anonymous users can access the shared folder.

     • Specified roles or user groups: Only members of specific roles or user groups can access the shared folder. Enter the role or user group.

     • Specified users: Only specified users can access the shared folder. Enter the username.

   • Permissions: Select the Read and Write permissions.

   The new FTP site appears in IIS Manager.

7. Configure the firewall for the FTP site.

   1. In IIS Manager, double-click the FTP site ftptest to open its home page.

   2. Double-click FTP Firewall Support.

      

   3. Configure the following parameters and click Application:

      • Data Channel Port Range: Port range for passive connections. Valid values: 1025 to 65535.

      • External IP Address of Firewall: The public IP address of the ECS instance.

      

      Note

      See Port configuration recommendations for FTP passive mode.

   4. Open Command Prompt and restart the FTP service:

      net stop ftpsvc 
       
      net start ftpsvc  

Step 5: Configure security groups and the firewall

Add inbound security group rules to allow traffic on port 21 and the passive mode port range (1024 to 65535).

1. In the firewall settings of the Windows simple application server, add an inbound rule to allow traffic on port 21 and ports 29000 to 30000. For more information, see Configure firewall rules.

   Set the protocol to TCP and the source to 0.0.0.0/0 (which allows access from all IP addresses).

2. (Optional) Configure the Windows firewall.

   By default, the internal firewall is disabled. If enabled, allow traffic on TCP port 21 and ports 40000 to 40100.

   For other firewall settings, see Microsoft official documentation.