Would you like to learn how to install the secure FTP server on a computer running Windows? In this tutorial, we are going to show you how to enable the secure FTP server on a computer running Windows.

• Windows 2012 R2
• Windows 2016
• Windows 2019
• IIS 8.5

Tutorial Windows - Secure FTP server installation

Open the Server Manager application.

Access the Manage menu and click on Add roles and features.

Windows 2012 add role

On the Server Roles screen, select the option named: Web Server IIS.

Click on the Next button.

IIS Installation

On the following screen, click on the Add features button.

IIS Features

On the Features screen, click on the Next button.

Windows 2012 - Features

On the Role service screen, select the option named FTP Server and both suboptions.

FTP server Installation Windows

On the Summary screen, click on the Install button.

FTP server Installation Summary

Congratulations! You have finished the FTP service installation on a computer running Windows Server.

Tutorial Windows - Secure FTP server configuration

After finishing the installation, create a group of users.

Members of this group will be authorized to use the secure FTP server.

Windows - FTP Users

In our example, we created a local group named FTP-USERS.

Create a directory to be used by the secure FTP server.

Windows - FTP Root

In our example, we created a directory named FTPSERVER on the root of drive C.

Start the application named: IIS Manager.

Start IIS Windows

On the IIS Manager application, select your IIS server name.

On the right part of the screen, access the option named: Server certificates.

IIS enable HTTPS

If you already have a certificate, click on the Import option on the top right part of the screen.

If you want to generate a self-signed certificate, select the option named: Create a self-signed certificate.

IIS Self-signed certificate

Enter a name to the certificate and click on the OK button.

IIS HTTP Certificate

In our example, we created a self-signed certificate.

Right-click the folder named Sites and select the option to add an FTP site.

Windows - FTP Server Configuration

Enter an identification to the new FTP site and select the desired directory.

In our example, we selected the directory previously created.

Windows - Add FTP SITE

On the next screen, perform the following configuration.

• IP Address - Select the desired IP address
• Start FTP site automatically - Yes
• SSL - Required SSL
• Certificate - Select the certificate previously created

Windows - Secure FTP server SSL

On the next screen, perform the following configuration.

• Anonymous authentication - No
• Basic authentication - Yes
• Allow access - Specified roles or user groups
• Group name - FTP-USERS
• Permissions - Read and write

Click on the Finish button.

Windows - FTP Server authentication

Congratulations! You successfully configured the secure FTP server on a computer running Windows 2012 R2.

Windows firewall - Allow the secure FTP connection

Open the application named Windows Firewall with Advanced Security

Select the Inbound rules option and make sure that all 3 FTP rules are enabled.

Windows - FTP firewall

On a remote computer, download the WINSCP software and try to connect to the secure FTP server.

WINDOWS - Secure FTP Client

Accept the warning message.

Windows SSL FTP Connection

In our example, the WINSCP software was able to connect to the Secure FTP server.

Windows - SSL FTP client

Even if the FTP firewall rules are in place, there is a possibility that your connection will be blocked.

Optionally, you may create a firewall rule to allow the FTP connection.

Create a new Inbound firewall rule.

zabbix active directory

Select the PORT option.

Select the TCP option.

Select the Specific local ports option.

Enter the TCP port: 20-21

Windows - FTP server firewall configuration

Select the Allow the connection option.

zabbix windows firewall allow connection

Check the DOMAIN option.

Check the PRIVATE option.

Check the PUBLIC option.

Enter a description to the firewall rule.

Windows - FTP server firewall description

You have finished the firewall configuration.