Skip to documentation
Interneting.orgDocs
Interneting.orgDocs

Documentation

SFTP access

Use public-key SFTP with FileZilla or another SSH-capable client.

Control uses SFTP over SSH. It does not run an FTP service and does not enable password login for managed Site SFTP accounts.

Create a key pair

On the computer that will connect:

ssh-keygen -t ed25519

The command creates:

  • id_ed25519.pub — the public key. Paste this into Control.
  • id_ed25519 — the private key. Keep this on your computer and select it in your SFTP client.

Never paste or upload the private key to Control.

Add the key in Control

Open the Site, choose SFTP, then Add public key. Paste the complete public-key line and save it. Wait for the Control operation to complete before connecting.

The SFTP panel shows the username you must use when connecting.

FileZilla

Create a Site Manager entry with:

  • Protocol: SFTP - SSH File Transfer Protocol
  • Host: your server hostname or address
  • Port: 22, unless your SSH service uses another port
  • Logon Type: Key file
  • User: the SFTP username shown by Control
  • Key file: your private id_ed25519

If FileZilla's file picker shows only PPK files, change the filter to All files and select id_ed25519. If your FileZilla/PuTTY configuration requires PPK, convert the private key with PuTTYgen and select the resulting .ppk file.

Confirm that the key pair matches

Control shows the fingerprint of each stored public key. On Windows PowerShell you can display the fingerprint of the public key next to your private key with:

ssh-keygen -lf "$env:USERPROFILE\.ssh\id_ed25519.pub" -E sha256

The SHA256: fingerprint should match the fingerprint shown in Control. If it does not, the private key selected in FileZilla is not the pair for the public key stored in Control.

Authentication failed

If the client reaches the server but reports Authentication failed or No more authentication methods available:

  1. Confirm the exact SFTP username shown by Control.
  2. Confirm FileZilla is using Key file authentication.
  3. Compare the public-key fingerprint with the one shown by Control.
  4. If the Site reports SFTP access as Needs Attention, open Convergence. Correct the reported cause, then use Retry repair if automatic repair has stopped.

Do not try a Site password: Control-managed SFTP access is key-only.

Deleting and recreating a Site

Deleting a Site removes its managed SFTP key registrations. A newly created Site, even on the same domain, has its own Site access identity. Add the public key to the new Site before connecting.

You do not need to generate a new SSH key pair simply because the Site was recreated. The same trusted public key can be added to the new Site, while the matching private key remains on your computer. Use the new SFTP username shown by Control.

See current SFTP connections

Administrators can use Security → Access to see current authenticated SFTP connections. Managed Site Unix identities are correlated back to the Site so you can see which Site is connected and the remote address in use.