With CuteFTP you can create and sign digital certificates. SSL servers use certificates to determine whether or not they will allow you to connect.
On the menu bar click Tools > Global Options.
Click Security > SSL Security.
Click the Create Certificate button.
Enter the Certificate Set Name - This will be the name of the certificate generated by the Certificate Wizard.
Enter the Output Location - Type a path or click the browse button to choose the folder where you will save the certificate.
Choose a bit-length for the certificate private key. CuteFTP supports up to 4,096 bit keys
Choose an Expiration date - This defines how long the certificate will remain valid.
Enter and confirm the Pass Phrase - The Pass Phrase can be any combination of characters or spaces. It is used to encrypt the private key. Do not lose the pass phrase. The certificate will be useless without it.
Click the Next button.
Enter the City/Town of your organization.
Enter the State/Province of your organization.
Enter the name of your Organization.
Enter the Common Name, typically this is your name or the domain name associated with your site.
Enter your E-mail address.
Enter the Unit or name of your department, i.e. Information Systems.
Enter the two-letter Country code for your organization's nation.
Click the Next button.
Select the Set up CuteFTP to use the generated certificate check box - the wizard will automatically associate the certificate to CuteFTP. It can later be unassociated by clearing the Use SSL Certificate check box in Tools > Global Options > Security > SSL. If the check box is cleared, the wizard will only save the certificate files in the directory you specified in Step 4.
Click Finish.
CuteFTP will display the paths to all the files generated for your certificate. If you want a third party to sign your certificate, you will need to send the Certificate Signing Request (.csr) file to the third party.
Not all SSL sites require certificates.
When you create a certificate CuteFTP generates three files;
A Private key file (.key) - The private key should never be distributed to anyone. It is used to decrypt sessions encrypted by a public key.
A Certificate request file (.csr) - This file can be signed by GlobalSCAPE Secure FTP Server's Certificate Signing Utility or sent to an intermediate Certificate Authority such as Verisign or Thawte for signing.
A Certificate file (.crt) - This is a signed certificate, whether self-signed or signed by an intermediate certificate authority.
If the server will accept self-signed certificates, you will be able to connect with the .crt file and .key file you created and associated to CuteFTP, provided the server has added your certificate to its trusted list.
You can export certificates (.crt files) from CuteFTP’s Trusted certificate store, located under Global Options > Security, SSL Security.