The Connection security allows you to set the required minimum TLS version and to install a new X.509 certificate. To set it up go to Protocol settings › FTP and FTP over TLS (FTPS) › Connection Security tab.
FileZilla Server/FileZilla Pro Entreprise Server at installation time generates a self-signed certificate for immediate use or testing. The details pertaining to the existing certificate are presented at the bottom of the Connection Security tab.
You can install a new certificate or reissue an existing one at any time. We offer these methods:
- Provide a certificate: Upload a certificate you already have, or enter it directly. You can also use a
certificate already on the server. - Generate a self-signed certificate: This is a quick option, but be aware that self-signed certificates are
not trusted by default. - Generate a certificate using Let’s Encrypt®: This is a free and trusted way to obtain a certificate.
Note: We’ve made some improvements to how you manage certificates in our latest update. Previously,the options were listed separately. Now you can choose to either upload, enter, or use a certificate already on the server, all under the Provide a certificate option. This simplifies the process and provides more flexibility. The functionality for generating self-signed certificates and using Let’s Encrypt® remains the same.
FileZilla Server:
Note: At some point you’ll get a warning error message The TLS certificates of the following protocols have expired informing you that the certificate has expired. In that case you can reissue the certificate, selecting one of the above options.
Related Topics: