Thanks for the references, Al. I discovered selfssl.exe last night, but saw it was designed for IIS 6.0. The somacon.com site confirms it also works with IIS 5.1, which is good to know. I'm still unsure if installing a certificate for the default web site also enables it for the default FTP site, but I guess I'll find out soon enough.

In this situation we're not doing any automation from VFP, the client just needs to host the FTP/SSL site and they didn't want to have to buy a server box unless absolutely necessary.

FWIW, I've used the free copSSH server to host an SFTP site (FTP over SSH) on a Windows XP Pro box, which works great. I played around with PuTTY a bit at that time and used it for testing but not for anything else. For sending files to another SFTP site I wrote an interface to drive WS_FTP Pro from VFP, which was pretty easy since I was already familiar with WS_FTP.



>>I have a client who wants to host a secure FTP site (FTP/SSL, aka FTPS) on a Windows XP Pro machine. I assume this would require obtaining and installing a security certificate, like for secure HTTP (HTTPS) on a Web server. Does anyone know for sure if FTP/SSL requires a security certificate to be installed on the host machine, and if so whether you can install a certificate on Windows XP Pro or does it require a Server OS?
>
>For SSL, you do need a cert on the host. You don't have to buy one, you can create your own with SelfSSL:
>
>http://www.somacon.com/p41.php
>
>I have one client, uploading a file daily to a remote site. In that case we used PSFTP in the MIT-licensed (i.e. "free") PuTTY toolkit:
>
>http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
>
>If you want to go that route, the toolkit can generate private/public key pairs. Again, if you want to go that route I can probably dig up some client-side code I used in VFP to automate PSFTP.