Zum Hauptinhalt springen
Deutsch
|
English

FTPPASSWORD - Detailed description

FM-Portal

IC0000
FM-Portal

Overview

Parameters:FTPPASSWORD
Category: Custom
Default value: String.Empty (empty)
Product: eTASK.Other (Custom)

What does this parameter do?

This parameter stores the password for FTP access, which is used for automated file imports. The password is used together with the username (FTPUSER) for authentication on FTP servers.

What is this parameter used for?

  • Authentication on FTP servers for automated file imports

  • Providing access credentials for FTP file transfers

  • Supporting interfaces that retrieve files via FTP

  • Enabling automated data imports without manual input

Technical Details (for Administrators)

Format: Text (String)
Default value: String.Empty (empty)

Important notes:

  • The parameter is stored in the database (UpdateDatabase: true)

  • The password is stored in the database in encrypted form

  • Used in conjunction with FTPUSER for FTP connections

  • Works with FTPSSLENABLED for secure FTP connections (FTPS)

Dependent parameters:

  • FTPUSER: Username for FTP access

  • FTPSSLENABLED: Enables/disables SSL encryption for FTP

When should you change this value?

Set this value if:

  • You want to set up automated file imports via FTP

  • An FTP server with authentication is being used

  • Interfaces need to retrieve files from a secure FTP server

  • The FTP password has been changed and needs to be updated

Leave the value blank if:

  • No FTP import is used

  • The FTP server does not require authentication

  • Other import mechanisms (e.g., local files, UNC paths) are used

Important Notes

  1. Encrypted Storage
    The password is stored in the database in encrypted form and is not visible in plain text in the system configuration.

  2. Interaction with FTPUSER
    This parameter must be configured together with FTPUSER. Both parameters form the complete login credentials for FTP connections.

  3. Password security
    Use a strong password and change it regularly in accordance with your security policies.

  4. FTPS Support
    In combination with FTPSSLENABLED = 1, encrypted FTP connections (FTPS) can be used.

Security

Does changing this parameter affect security?

Yes, this parameter is security-relevant because it contains authentication data.

  • The password enables access to an FTP server

  • A compromised password can allow unauthorized access to FTP data

  • The password is stored in encrypted form, but the encryption is only as secure as the database itself

  • Administrators with database access can potentially access encrypted passwords

Security recommendations:

  • Use a strong, unique password

  • Change the password regularly

  • Use FTPSSLENABLED = 1 for encrypted transfers (FTPS)

  • Limit the FTP account's permissions to what is necessary

  • Monitor FTP access for suspicious activity

Conclusion: This parameter is security-relevant. Treat FTP credentials with the same care as other authentication information and use encrypted connections whenever possible.

Practical example

Initial situation:
A company receives CSV files daily from a service provider via an FTP server. These are to be imported automatically. The FTP server requires authentication with a username and password.

Configuration:
The administrator sets FTPUSER to etask_import and FTPPASSWORD to the password provided by the service provider. Additionally, FTPSSLENABLED set 1 is set for secure transmission.

After the change:

  • The system can automatically log in to the service provider's FTP server

  • Timer jobs or import processes retrieve new files daily

  • Authentication occurs automatically using the stored login credentials

  • The connection is encrypted via SSL/TLS (FTPS)

  • Files are imported without manual intervention

Result:
Fully automated, secure file import from the FTP server without manual intervention.

For standard installations: Set only if needed

Reason:

  • This parameter should only be configured if FTP imports are actually used

  • Unnecessarily stored login credentials pose a security risk

  • Leave blank if no FTP import is required

For FTP import:

  • Use a strong password in accordance with your password policy

  • Enable FTPSSLENABLED = 1 for encrypted connections

  • Document what the FTP access is used for

  • Set up monitoring for FTP access

note6f67f60f-c82b-4382-aee0-06569442b41a

Tip: If possible, use more modern protocols such as SFTP (SSH File Transfer Protocol) instead of FTP. If FTP must be used, always enable FTPS by setting FTPSSLENABLED = 1.

Tip: If possible, use more modern protocols such as SFTP (SSH File Transfer Protocol) instead of FTP. If FTP must be used, always enable FTPS by setting FTPSSLENABLED = 1.

War dieser Artikel hilfreich?