FTP installed as part of IIS on Windows Server 2022 does not seem to support TLS 1.3

Question

Hi,

I have upgraded several servers to Windows Server 2022, and installed some from scratch.

For all it seems as if the FTP service installed as part of the IIS on Windows Server 2022 does not support TLS 1.3.

The maximum version I can get working is TLS 1.2.

Do anyone know if, specifically the FTP service is supported running TLS 1.3?

All documentation I have been able to find regarding Windows Server 2022 only states that it supports TLS 1.3 - I assumed that would include the roles possible to install on the server too...

I have tried to disable all other protocols on the server, as well as setting different FTP clients to only use TLS 1.3 - all fail to connect to the FTP service through TLS 1.3.

/Michael

Answer 1

Hello there,

When it comes to FTP in Windows Server, the version of the FTP service bundled with IIS does not natively support TLS 1.3. The FTP service included in IIS relies on the underlying Windows operating system for its encryption capabilities. Windows Server 2022 may have updated versions or changes to this behavior, but I cannot provide specific details.

In previous versions, such as Windows Server 2019, the FTP service only supports up to TLS 1.2. To achieve TLS 1.3 encryption for FTP connections, you would typically need to use a third-party FTP server software that specifically supports TLS 1.3.

Alternatively, you could consider using an FTP over SSH (SFTP) solution instead. SFTP utilizes the secure shell (SSH) protocol for encryption, and many modern FTP clients and servers support SFTP.

I used AI provided by ChatGPT to formulate part of this response. I have verified that the information is accurate before sharing it with you.

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--