ssl Element for security for ftpServer for site for sites [IIS Settings Schema]

Article
10/21/2021

Note

For more information about the ssl element, see the following topic on the Microsoft IIS.net Web site: FTP Over SSL <ssl>.

Specifies the FTP over Secure Sockets Layer (SSL) settings for the FTP service.

Syntax

Attributes and Elements

The following sections describe attributes, child elements, and parent elements for this section.

Attributes

controlChannelPolicy

Optional enum attribute.

Specifies the SSL policy for the FTP control channel.

Note

There is no enum value that denies SSL for the command channel; to deny SSL, do not bind an SSL certificate to the FTP site by specifying a certificate hash in the serverCertHash attribute.

Value	Description
SslAllow	Specifies that SSL is allowed for the control channel. The numeric value is 0.
SslRequire	Specifies that SSL is required for the control channel. The numeric value is 1.
SslRequireCredentialsOnly	Specifies that only the "USER" and "PASS" commands have to be sent over SSL session. After an FTP client has logged in, the client can switch to a non-secure mode. The numeric value is 2.

The default value is SslRequire.

dataChannelPolicy

Optional enum attribute.

Specifies the SSL policy for the FTP data channel.

Value	Description
SslAllow	Specifies that SSL is allowed for the data channel. The numeric value is 0.
SslRequire	Specifies that SSL is required for the data channel. The numeric value is 1.
SslDeny	Specifies that SSL is denied for the data channel. The numeric value is 2.

The default value is SslRequire.

serverCertHash

Optional string attribute.

Specifies the thumbprint hash for the server side certificate to use for SSL connections.

There is no default value.

serverCertStoreName

Optional string attribute.

Specifies the certificate store for server SSL certificates.

The default value is MY.

ssl128

Optional Boolean attribute.

Specifies whether 128-bit SSL is required.

The default value is false.

Child Elements

None.

Parent Elements

Element	Description
configuration	Specifies the root element in every configuration file that is used by IIS 7.
system.applicationHost	Specifies the root element for configuring Web process settings.
sites	Defines all sites on the server, and all applications and virtual directories in those sites.
site	Specifies configuration settings for a site.
ftpServer	Specifies the site-level security options for an FTP site.
security	Specifies the site-level authentication settings for an FTP site.

Remarks

For more information about the ssl element, see the following topic on the Microsoft IIS.net Web site: FTP Over SSL <ssl>.

Element Information

Configuration locations	ApplicationHost.config
Requirements	IIS 7

Share via