Configuring SSL Authentication for a Settings Template or User Account

SSL must first be enabled on the Site and Server. SSL authentication can then be enabled for a Settings Template and/or for each user.

If you require certificates from connecting clients before they can connect, then their certificate must be in the Trusted Certificates Database or signed by a certificate in the Trusted Certificate Database.

If you are using SSL authentication for accounts that need to send AS2 transfers (requires optional module), leave it at the default password authentication, not certificate authentication.

To enable SSL

  1. In the administration interface, connect to EFT and click the Server tab.

  2. On the Server tab, select the Settings Template or user account that you want to configure.

  3. In the right pane, select the Connections tab.

  4. In the Protocols area, select the applicable check boxes (FTPS, HTTPS, and/or AS2).

  5. Click SSL Auth. The SSL Authentication Options dialog box appears.

  6. In the SSL authentication options list, specify the authentication method:

    • Specified in Settings Template (available for user accounts)

    • Password only

    • SSL Certificate - If SSL Certificate is specified, specify the user certificate in the second list that appears.  

      • Compliance with PCI DSS requires that users change their password upon initial login. Because the "SSL Certificate" login method does not use a password, it potentially violates the PCI DSS and is, therefore, not available on Sites defined using the "strict security settings" option.

  7. Click OK to close the dialog box.

  8. Click Apply to save the changes to EFT.