Docs

Elastic Compute Service

Building FTP site

Setting up FTP sites (Windows 2019)

File Transfer Protocol (FTP) is an application-layer protocol used for file transfer between a client and a server over a computer network. Typically, it operates on two ports: 20 and 21. This topic describes how to set up an FTP site on a Windows Server 2019 instance.

Prerequisites

You have purchased an ECS instance and associated an EIP with it.

The ECS instance status is Running.

Software version

Windows operating system: This topic uses Windows Server 2019 as an example.

IIS: Web server. This topic uses IIS 10 as an example.

Client operating system: This topic uses macOS Sequoia 15.6.1 as an example.

Procedure

Step 1: Install the FTP service in IIS

On the server desktop, click "Start" in the lower left corner, and select "Server Manager".

In the "Server Manager" window, click "Add roles and features".

In the "Add Roles and Features Wizard" window that pops up, click "Next" to enter the "Select installation type" interface.

In the "Select installation type" interface, select "Role-based or feature-based installation", and click "Next".

On the "Select destination server" page, keep the default settings and click "Next".

In the "Select server roles" interface, select "Web Server (IIS)". Then, in the pop-up window, click "Add Features".

Continue clicking "Next" until you reach the "Select role services" interface.

In the "Select role services" interface, check "FTP Service" and "FTP Extensibility", and click "Next".

Click "Install", then wait for the installation to complete, and click "Close".

Step 2: Create an FTP username and password

tip

Create a Windows username and password for FTP use. If you need access as an anonymous user, skip this step.

In the "Server Manager" window, select "Tools > Computer Management" from the navigation bar in the upper right corner to open the "Computer Management" window.

In the "Computer Management" interface, select "System Tools > Local Users and Groups > Users" in the left navigation pane.

In the interface to the right of "Users", right-click an empty space and select "New User" in the pop-up window.

On the "New User" interface, set the username and password as instructed below. Then, click "Create".

User name: This topic uses "ftptest" as an example.

Password: Set a password based on password requirements.

Password never expires: Select this option as needed. In the example provided in this topic, this option is selected.

Step 3: Set shared folder permissions

On the server desktop, click "File Explorer", and then select "This PC".

Double-click "Windows 2019 (C:)" to enter the C drive, right-click an empty space, and create an FTP shared folder named "test".

Right-click the "test" folder and select "Properties".

In the "test Properties" window, select the "Security" tag and click the "Edit" button.

On the pop-up "Permissions for test" page, click the "Add" button.

In the pop-up dialog box, enter the object name "ftptest", and click "Check Names".

Confirm the name, and then click the "OK" button.

In the "Permissions for test" window, grant permissions to "ftptest" as needed, and click "OK".

In the example provided in this topic, all permissions are granted.

In the "test Properties" window, click the "OK" button to complete the setting.

Step 4: Add an FTP site

In the "Server Manager" window, select "Tools > Internet Information Services (IIS) Manager" from the navigation bar in the upper right corner.

Right-click "Sites", and then click "Add FTP Site".

In the pop-up window, enter the FTP site name, select the physical path of the shared folder, and click "Next".

In the example provided in this topic, "ftpserver" is used as the FTP site name, and C:\test as the physical path.

On the "Binding and SSL Settings" interface, configure relevant settings as needed, and then click "Next".

Binding: The IP address defaults to "All unassigned", and the port to 21 (the default FTP port number). You can also set a port number manually.

SSL: Select this option as needed. In the example provided in this topic, "No SSL" is selected.

No SSL: SSL encryption is not required.

Allow SSL: An FTP server is allowed to support non-SSL and SSL connections between the FTP server and clients.

Require SSL: SSL encryption is required for communications between the FTP server and clients.

If you select "Allow SSL" or "Require SSL", you can choose an existing SSL certificate in the "SSL Certificate" section. Or, refer to steps in the creating server certificates section to create one.

On the "Authentication and Authorization Information" interface, configure relevant settings, and then click the "Finish" button.

Authentication: Select an identity authentication method. This topic uses "Basic" as an example.

Anonymous: Allows any user to access content with an anonymous username (anonymous) or an FTP username.

Basic: Requires a user to provide a valid username and password to access content. Because basic authentication transmits passwords in an unencrypted form over the network, use this authentication method only when you know the connection between clients and the FTP server is secure (such as via the Secure Sockets Layer, SSL).

Authorization: Select a method from the "Allowed access to" dropdown list. In the example provided in this topic, "Allowed access to" is set to "Specified users", and the user is specified as "ftptest".

All users: All users can access content.

Anonymous users: Anonymous users can access content.

Specified roles or user groups: Only members belonging to the specified roles or user groups can access content. After selecting this option, you need to specify the role or user group.

Specified users: Only specified users can access content. After selecting this option, you need to specify the username.

Permissions: Grant permissions for authorized users. In the example provided in this topic, Read and Write permissions are granted.

Read: Allows authorized users to read content from the directory.

Write: Allows authorized users to write to the directory.

Configure the firewall for the FTP site.

In the Internet Information Services (IIS) Manager, double-click the FTP site named "ftpserver" to open the home page of the FTP site.

Double-click "FTP Firewall Support".

In the text box under "External IP address of Firewall", enter the Windows instance EIP.

In the "Actions" column on the right side of the page, click "Apply". Then, in the pop-up window, click "OK".

Step 5: Configure the security group and firewall

After the FTP site is set up, add rules to the inbound direction of the instance security group and allow the following FTP ports. For detailed steps, refer to Changing security group rules.

Configure the instance security group

Add inbound rules to the security group of the Windows instance to allow traffic on port 21 and port range 1024 – 65535.

FTP usage mode	Direction	Protocol type	Port range	Source address
Active mode	Inbound	TCP	20/21	0.0.0.0/0
Passive mode	Inbound	TCP	Port 21 and ports 1024–65535 tip To adjust the passive mode port range, refer to configuration recommendations. This topic uses the range 1024-65535 as an example.	0.0.0.0/0

Configure the instance firewall

Follow the guide in the "Configure port rules for the firewall" section to create inbound rules in your instance and allow TCP ports 20, 21, and 1024–65535 as needed. For more firewall settings, refer to Microsoft official documents.

tip

Replace 1024-65535 with the actual passive mode port range.

Step 6: Test the client

You can verify the FTP service using FTP client software, a browser, a file explorer, or other tools. This topic uses MacOS Finder as an example.

Open Finder and select "Go > Connect to Server" in the top menu bar.

Enter ftp://ECS instance EIP:21 and click the "Connect" button.

In the pop-up login window, confirm the FTP server information and click the "Connect" button.

Enter the FTP username and password that have been set, and then click "Connect". After the connection succeeds, you can view a file in the specified directory on the FTP server.

warning

Since macOS "Finder" does not support uploading files to an FTP server, you can download third-party software like FileZilla to transfer files.

Last updated: 2026.06.18 17:48:26