FTP Server Settings - SSL

Accept Self-Signed Certificates
Enable to accept a self-signed server certificate.

Accept Expired Certificates
Enable to accept a server certificate that has expired.

Accept Not Yet Valid Certificates
Enable to accept a server certificate that has a starting date in the future.

Accept Invalid Certificates
Enable to accept if the server certificate is invalid for any reason other than the date or signature. With this option enabled, the server certificate check will be ignored.

Accept Host Name Mismatch
Enable
to accept SSL certificates that have mismatched names. Host names may be either an IP address or a DNS name. In order for host names to match both must be either IP addresses or DNS names.

Action if Certificate Not Accepted
This option determines how PASSPORT will respond to any items above that are unchecked. The items above that are checked will ignore this option and allow the certificate. Choose one of the following:

Enable Client Authentication
If enabled, an SSL client certificate will be used to establish an SSL connection with the host. A certificate must be specified in order to use this option.

Certificate to use from "My" store:
Select the SSL certificate to use. In order to use your own SSL client certificate, it must first be added to the Microsoft Windows Certificate Store.

Encrypt Data Channel
Enable encryption of the data channel. The security standard for FTP states that the data channel remains insecure by default. This means that SSL encryption would usually only be enabled on the control channel. Although this would protect from eavesdropping of user names, passwords and file locations, the uploaded and downloaded files would remain vulnerable. By setting the data channel to be encrypted, PASSPORT does not have to implicitly state encryption of the data channel.