Creating an SSL certificate

WS_FTP Server can generate SSL certificates for you to apply to listeners.

• To create an SSL certificate and apply it to a listener:

1. From the top menu, select Server > Listeners. The Listeners page opens.
2. Click the IP address of the listener you want to open. The Edit Listener page opens.

   Note: Since SSL can be configured only on FTP listeners, make sure that you select a listener that displays FTP in the Server type column.

3. Under Encryption Options, click Edit SSL Settings. The Listener Encryption Settings page opens.
4. Next to SSL Certificate, click Select. The Select SSL Certificate page opens.
5. Click Create. The Create SSL Certificate page opens.
6. Enter the appropriate information for each of the fields.
   • Name. Enter a name for the certificate. This name is for your reference and is never displayed to users.
   • Expire date. Enter an expiration date for the certificate, or click the calendar icon to browse for one.
   • Passphrase. Enter the passphrase for the certificate. The passphrase is used to encrypt the key file.
   • Confirm passphrase. Re-enter the same passphrase as above.
   • City/Town. Enter the name of the city or town where you are located (for example, Augusta).
   • State/Province. Enter the name of the state or province where you are located (for example, GA).
   • Country. Enter the two-character code of the country where you are located (for example, US).
   • Common name. Enter the host name that users enter to access the host this certificate will be applied to (for example, ftp.progress.com).
   • Email. Enter the email address of the person responsible for this certificate.
   • Organization. Enter the name of your company or, if you are running the server privately, your name (for example, Progress, Inc.).
   • Unit. Enter the name of the organizational unit (for example, Information Technology).
   • Key size. Select the key size for the certificate. A higher key size creates a more secure key, but takes longer to generate. The minimum key size is 2048.
   • SHA. Select the hash algorithm for the certificate. The default is the more secure SHA-2.

     If you plan to purchase a certificate from a Certificate Authority, you can still select any of the available key sizes. For general information about purchasing a certificate, see the FAQ on Verisign's site.

7. Click Save. The Select SSL Certificate page reopens with the new certificate included in the list.
8. Select the certificate you just created, then click OK. The Listener Encryption Settings page opens again, with the SSL certificate you created displayed in SSL Certificate box.
9. Click Save.