Secure File Transfer Protocol (SFTP)

Feeder Services uses SFTP to deliver Geodatabase Region Resources (GRRs) – either single or as grouped files – to a predefined location. This secure channel allows the app to automatically retrieve and process data without requiring manual transfers.

SFTP provides a standard, reliable integration point for Feeder Services to consume GRR files. Once the SFTP endpoint is configured, the process is simple: place the zipped GRR in the target folder and Feeder Services handles the rest. This approach reduces human error, improves consistency, and supports security best practices.

IMPORTANT: Feeder Services requires an active and accessible SFTP location to receive GRR uploads. Automated processing can’t be configured without it.

Below are recommended steps to set up and configure an SFTP endpoint using OpenSSH on Windows. The SFTP location must be reachable from the Feeder Services environment and secured according to your organization’s standards. These steps are foundational and in no way exhaustive.

Prerequisites:

Administrator access to the target server.
Port 22 open for inbound SFTP traffic.
Access to install and configure Windows features or OpenSSH binaries.

Install and Configure

Install the OpenSSH Server feature — on Windows 10/11, access Settings > Apps > Optional Features > Add a feature and install OpenSSH Server.
Enable and start the SSH/SFTP service — configure the service to start automatically and verify that it is running after installation.
Allow port 22 through the firewall. — add an inbound rule for TCP port 22, or configure your network to allow SFTP traffic.
Review and configure sshd_config — confirm that the sshd_config directive is enabled, and set appropriate user or group access. Restart the service after any changes.
Set up authentication — you can use password or SSH key-based authentication. For key-based access, place the public key in authorized_keys and ensure that file permissions are correct.
Test connectivity and permissions — use a client such as WinSCP or a command line (sftp user@host) to verify login, file transfer, and write access to the upload directory.

When installation and configuration are complete, Feeder Services can securely upload GRR files to the designated SFTP location for automated processing.

NOTE: Regular monitoring of the SFTP server is recommended to ensure continuous availability, proper access control, and security compliance.

SFTP Configuration

With an SFTP server configured, next you must store the SFTP Credential, Public Key, and Target Remote Directory.

In the Client Configuration plugin, click the SFTP Configuration tab.
Populate all fields (the entries in the image below are examples).
- All fields are required except for the SFTP Remote File Path. If the Remote File Path is not set, the zipped files are stored in the default working directory as established during your implementation.
- The SFTP SSH HostKey must be the SHA256 form of the key. It should not contain the algorithm used for encoding it.
Click Save.