Transfer Engine (SDK) 

To setup the target system to use client certificates 

1.  On the developer machine, create the client certificate and private key pair using the 

CuteFTP GUI (interface). The certificate creation utility is located under the Tools 

> Global Settings > Security > SSL dialog. 

2.  Add the client certificate to the server's trusted list. Do this by connecting to the 

server with the CuteFTP GUI (interface) from the developer machine. On the 

server, move the certificate from the Pending to the Trusted list. If your server only 

has a Trusted list, manually import the client certificate into the Trusted list. 

3.  Place the client certificate and private key into the target machine's USER folder: 

C:\Documents and Settings\[USERNAME]\Application 

Data\GlobalSCAPE\CuteFTP Pro\Security 

  where [USERNAME] is the login name for the user. 

4.  If you created the certificate set on the developer machine, export the following 

registry key: 

HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 

Professional\Settings\SecuritySSL 

5.  Import the registry key from step 4 onto the target machine, or manually create the 

necessary entries. The entries are shown in standard .reg file notation. 

REGEDIT4 

[HKEY_CURRENT_USER\Software\GlobalSCAPE\CuteFTP 

Pro\Settings\SecuritySSL] 

"SSLCertificate"="C:\\Documents and 

Settings\\[USERNAME]\\Application 

Data\\GlobalSCAPE\\CuteFTP Pro\\Security\\client.crt" 

"SSLPrivateKey"="C:\\Documents and 

Settings\\[USERNAME]\\Application 

Data\\GlobalSCAPE\\CuteFTP Pro\\Security\\client.key" 

"UseSSLCertificate"=dword:00000001 

"UseSSLCertPassphrase"=dword:00000001 

"ReuseSSLData"=dword:00000000 

"WarnWhenToNonSecure"=dword:00000001 

"DataTransportMethod"=dword:00000001 

"SSLCertPassphrase"="[PASSWORD]" 

  Where [USERNAME] is the login name for the target system and where 

[PASSWORD] is the encrypted password exported from the source machine. Don t 

modify the password! 

At the next connection, the TE finds the client certificate and uses it to authenticate with the 

server. 

Example 

Here is a sample script that connects to a fictitious site running SSL Implicit over port 990. 

It also writes to the event log for debugging purposes. if you use this script to test your 

175