<p>This article describes how to build an FTP site using Windows instances. This article uses Win2019_DataCenter_64bit_CN as an example.</p> <p><strong>Procedures</strong></p> <p><strong>Step 1: Add IIS and FTP service roles</strong></p> <p>1．Log in to the ECS Console.</p> <p>2．Click <strong>Start</strong> &gt; <strong>Server Manager</strong>.</p> <p>3．Enter the <strong>Dashboard</strong> page and click <strong>Add Roles and Features</strong>.</p> <p>4．The <strong>Add Role</strong> and <strong>Function Wizard</strong> page opens. On the tab before <strong>Start</strong>, click <strong>Next</strong>.</p> <p>5．Select <strong>Role-based or Feature-based Installation</strong> and click <strong>Next</strong>.</p> <p>6．Select the <strong>Server from the Server Pool</strong> and click <strong>Next</strong>.</p> <p>7．Click <strong>Web Server (IIS)</strong>, in the <strong>Add Role and Function Wizard</strong> dialog box that opens, click <strong>Add Function</strong>, then click <strong>Next</strong>.</p> <p>8．Click <strong>Next</strong> twice to enter the <strong>Role Service</strong> tab of the <strong>Select Role Service</strong> page.</p> <p>9．Check the FTP server, including <strong>FTP Service</strong> and <strong>FTP Extension</strong>, and click <strong>Next</strong>.</p> <p>10．Enter the <strong>Confirm Installation</strong> <strong>Selection</strong> page and click <strong>Install</strong> to start deploying service roles.</p> <p>11．After completing the installation, click <strong>Close</strong>.</p> <p><strong>Step 2: Create FTP user name and password</strong></p> <p>Create a Windows user name and password for FTP use. If you want anonymous users to be able to access, this step is not necessary.</p> <p>1．On the <strong>Server Manager</strong> page, click <strong>Dashboard </strong>&gt; <strong>Tools </strong>&gt; <strong>Computer Management</strong>.</p> <p>2．Enter the <strong>Computer Management</strong> page, click <strong>System Tools</strong> &gt; <strong>Local Users and Groups</strong> &gt; <strong>Users</strong>, right-click in the blank area on the right, and select <strong>New User</strong>.</p> <p>3．In the <strong>New User</strong> page that opens, set the user name and password. In this example, the user name is ftptest.</p> <p><strong>Note:</strong> The password must include uppercase letters, lowercase letters, and numbers.</p> <p>4．Click <strong>Create</strong>.</p> <p><strong>Step 3: Set permissions for shared files</strong></p> <p>Set access, modify and other permissions for folders shared with users on the FTP site.</p> <p>1．Create a folder for FTP on the server. In this example, the file name is <strong>ftp</strong>. Right-click the folder and choose <strong>Properties</strong>.</p> <p>2．Enter the <strong>Property</strong> page, click the<strong> Security</strong> tab, select <strong>Everyone</strong>, and click <strong>Edit</strong>.</p> <p><strong>Note:</strong> If Everyone is not available here, you can refer to the <strong>Supplement Operation</strong>.</p> <p>3．Select <strong>Everyone</strong>, and check Everyone&#39;s permissions as needed. In this example, all permissions are allowed, and click <strong>Confirm</strong>.</p> <p>4．On the <strong>Property</strong> page, click <strong>Confirm</strong> again to close the <strong>Property</strong> page.</p> <p><strong>Step 4: Add and set up FTP site</strong></p> <p>1．On the <strong>Server Manager</strong> page, click <strong>Dashboard</strong> &gt; <strong>Tools</strong> &gt; <strong>Internet Information Services (IIS) Manager</strong>.</p> <p>2．Enter the <strong>Internet Information Services (IIS) Manager</strong> page, click the <strong>&gt;</strong> icon in front of the server name to expand all displayed content.</p> <p>3．Right-click on the <strong>Website</strong> and select <strong>Add FTP Site</strong>.</p> <p>4．In the <strong>Add FTP Site</strong> page that opens, enter the FTP site name and the physical path of the shared folder, and click <strong>Next</strong>.</p> <p>5．Enter the public IP address and port number of the ECS Instance. The default port number of FTP is 21, or you can set it.</p> <p>6．Set up SSL as needed, and click <strong>Next</strong>.</p> <p><strong>Note:</strong></p> <ul> <li>None: No SSL encryption is required.</li> <li>Allow: Allow non-SSL and SSL connections between the FTP server and the client.</li> <li>Need: SSL encryption is required for the communication between the FTP server and the client.</li> </ul> <p>7．According to the following information, check the <strong>Authentication</strong>, <strong>Authorization</strong>, and <strong>Permission</strong> options, and click <strong>Finish</strong>.</p> <table border="1" cellpadding="0" cellspacing="0"> <tbody> <tr> <td style="vertical-align:top"> <p><strong>Configuration item</strong></p> </td> <td style="vertical-align:top"> <p><strong>Description</strong></p> </td> </tr> <tr> <td style="vertical-align:top"> <p>Authentication</p> </td> <td style="vertical-align:top"> <p>There are two authentication methods:</p> <ul> <li><strong>Anonymous:</strong> Allow any user who only provides the user name anonymous or ftp to access the content.</li> <li><strong>Basic:</strong> The user is required to provide a valid user name and password to access the content.</li> </ul> <p><strong>Note:</strong> Basic authentication does not encrypt the password when it is transmitted over the network. It is recommended to use this authentication method when confirming the security of the network connection between the client and FTP server.</p> </td> </tr> <tr> <td style="vertical-align:top"> <p>Authorization</p> </td> <td style="vertical-align:top"> <p>Under <strong>Allow Access</strong>, select an option.</p> <ul> <li><strong>All users:</strong> All users can access the corresponding content.</li> <li><strong>Anonymous users:</strong> Anonymous users can access the corresponding content.</li> <li><strong>Designated role or user group:</strong> Only members of the designated role or user group can access the corresponding content. If you select this item, please enter the designated role or user group in the input box below.</li> <li><strong>Designated users:</strong> Only designated users can access the corresponding content. If you select this item, please enter the specified user in the input box below.</li> </ul> </td> </tr> <tr> <td style="vertical-align:top"> <p>Permission</p> </td> <td style="vertical-align:top"> <p>Select <strong>Read</strong> and <strong>Write</strong> permissions for authorized users.</p> </td> </tr> </tbody> </table> <p>8．After completion, you can view the built FTP site.</p> <p><strong>Step 5: Configure FTP Firewall Support (Optional)</strong></p> <p>If you need to use the passive mode of the FTP server, you need to configure FTP firewall support.</p> <p>1．Double-click <strong>FTP Firewall Support</strong> to enter the <strong>FTP Firewall Support</strong> page.</p> <p>2．Configure the data channel port range and the external IP address parameters of the firewall.</p> <p><strong>Note:</strong></p> <ul> <li><strong>Data channel port range:</strong> Specify the port range used for passive connection. The port range that can be specified is 1025-65535. You can set it according to actual business needs.</li> <li><strong>External IP address of the firewall:</strong> Enter the public IP address of the ECS Instance.</li> </ul> <p>3．Click <strong>Apply</strong> in the right operation region.</p> <p><strong>Note:</strong> Click <strong>Cancel</strong> in the <strong>Operation</strong> region, you can cancel the FTP firewall support.</p> <p><strong>Step 6: Set up security groups and firewalls</strong></p> <p>After the FTP site is built, you need to add a rule to allow FTP ports in the inbound direction of the ECS Instance security group. For more information, see Configure Security Group Rules.</p> <p>The server firewall used for FTP service allows TCP port 21 by default. If you choose another port, you need to add an inbound rule to allow this port in the firewall.</p> <p><strong>Step 7: Client test</strong></p> <p>1．Open the client IE browser.</p> <p>2．In the path bar, enter: <strong>ftp: // FTP server IP address: FTP port</strong>, for example: ftp: // 101.89.95.105:21.</p> <p><strong>Note:</strong> If you do not fill in the port information, you will access port 21 by default.</p> <p>3．A dialog box for entering the user name and password opens, indicating that the configuration is successful. Enter the correct user name and password to operate the FTP file with corresponding permissions.</p> <p><strong>Note:</strong> If <strong>FTP Firewall Support</strong> is not configured, the client needs to set the IE browser when using this method to access the FTP site. Only after the configuration is complete can the FTP folder be opened. You can open the IE browser, select <strong>Settings</strong> &gt; <strong>Internet Options</strong> &gt; <strong>Advanced</strong>, check the <strong>Enable FTP Folder View</strong> in the <strong>Browsing</strong> area, uncheck <strong>Use passive FTP</strong>.</p> <p><strong>Supplementary Operation</strong></p> <p>If there are no <strong>Evevyone</strong> users to choose from when setting folder properties, follow the steps below to add <strong>Evevyone</strong> users.</p> <p>1．Under the <strong>Security</strong> tab group or user name area, click <strong>Edit</strong>.</p> <p>2．In the <strong>Permission</strong> page that opens, click <strong>Add</strong>.</p> <p>3．In the<strong> Select User or Group</strong> page that opens, click <strong>Advanced</strong>.</p> <p>4．On the right side of the <strong>General Query </strong>area, click <strong>Find Now</strong>, select <strong>Everyone</strong> in the search results area, and click <strong>Confirm</strong>.</p> <p>5．Click <strong>Confirm</strong> twice to complete the <strong>Add</strong>.</p>