FTP Settings

FTP access to an Egnyte account is available to Admins and Power Users by default. However, Admins can restrict FTP access and/or require secure connections only.

SFTP access to Egnyte account is available to Admins and Power Users by default. However Admins can restrict access to selected Power Users through Role-based Administration.  Admins can also select the SFTP Authentication mode to be either Password-based or SSH Key-based.  

FTP

1. To change FTP access for users, navigate to Settings, select Applications, and scroll down to the FTP section.

   

2. When Admins choose to enable FTP, FTPES (SSL-based FTP) is selected by default 

   

3. There are 3 options for customizing FTP access by type of users:

   • Admins only: Only Administrators can connect and transfer

     Power Users will experience error 421 FTP access is not available to this user if this setting is set to Admins only. 

   • Admins & Power Users: Administrator and Power Users can connect and transfer files via FTP.
   • No FTP Access: To disable FTP access for all users, simply change the toggle to Disabled and click Save.
     

SFTP (SSH-based FTP)

To require secure FTP connections, enable SFTP (SSH-based FTP), disable  FTP, and click Save. We recommend only allowing secure connections as normal FTP transmits usernames and password un-encrypted over the network and can therefore pose a security risk.

There are 3 options for customizing SFTP access by type of users:

• Admins only: Only Administrators can connect and transfer files via FTP.

  Power Users will experience error 421 FTP access is not available to this user if this setting is set to Admins only. 

• Admins & Power Users: Administrators and Power Users can connect and transfer files via FTP.
• Admins & Assigned Users: Administrators and selected Power Users can connect and transfer files via SFTP. To choose which Power Users have access, refer Grant SFTP Access to Selected Power Users below.
• No FTP Access: To disable SFTP access for all users, simply change the toggle to Disabled and click Save.

Grant SFTP Access to Selected Power Users

To give SFTP access to specific Power Users only:

1.  In Settings → Configuration → Applications, enable SFTP for Admins & Assigned Users.
2. In Settings → User Types & Roles → User Types, enable can access SFTP under Power Users.
   
3.  In Settings → User Types & Roles → Roles, edit a role and enable can access SFTP under Applications.
   
4. Assign the role to the Power Users who need SFTP access.
   

SSH Key Requirements

Each user can add up to 5 keys, and each public key must be in OpenSSH format.

SFTP SSH Key Management

The SFTP Key Management window lists keys for both service accounts and Power Users. Administrators manage keys for service accounts. Power Users manage their own keys in Settings > My Profile > My SFTP SSH Keys. For steps, see Adding and Removing SFTP SSH Keys.

1. An administrator has visibility over the domain SSH keys.  To manage SSH keys, click on View and manage domain SSH keys.
   
2. A new window will open up called SSH Key Management. In this window, Admins will be able to view all the keys that authorized Users have created as well as the keys that have been created for Service Accounts.  
   
3. To add a key for a Service Account, click Add New Key.  
   
4. Then a Create SSH Key window will open. Type in the Username of the service account, enter in the Key Name, and then paste the Public Key.
   

Revoke SSH Key

Administrators can revoke keys for service accounts. 

1. To revoke a key, click the three-dot menu at the right of the key, then click Revoke Key.
   
2. A Revoke SSH Key window opens and asks user to confirm. Click Revoke Key to confirm, or Cancel to keep the key.