# Client Connection: FTPS Fields with the asterisk **\*** are mandatory.
PropertiesDescription
STATUS

Enable or disable the client connection. Possible values:

  • Enabled (default)
  • Disabled
NAME *Name of the FTPS connection you are creating. The maximum number of characters is 128. Blanks and the ' " | special characters are not supported.
DESCRIPTIONDescription of the FTPS connection you are creating. The maximum number of characters is 2048.
HOST *Remote host IP Address or hostname.
PORT *Port to connect to the remote host (1 to 65535).
USERNAME *Username to be used for the connection. The maximum number of characters is 320.
PASSWORD *User password.
CONNECTION TIMEOUTNumber of seconds without network activity to wait before closing a session due to inactivity.
Default value: 60.
CONNECTION MODE *

How data connection is established. Possible values:

  • ACTIVE (default): the client opens the control connection to the server.
    When a data transfer is required, the server initiates the data connection back to the client.
  • PASSIVE: the client opens the control connection and, when needed, also initiates the data connection to the server.
CONNECT THROUGH DMZ

Enable or disable DMZ proxy. Possible values:

  • Enabled
  • Disabled (default)
SELECT DMZ CLUSTERWhen the Connect through DMZ toggle is enabled, this drop-down list displays all DMZ Clusters configured in Setup → DMZ Clusters. When you select one or more DMZ clusters, they will be applied to the client connection. If one of the selected DMZ clusters is unavailable, the remaining DMZ clusters will be used in RUNTIME or ROUNDROBIN mode. If no DMZ cluster is selected, all configured DMZ clusters will be used automatically.
CLIENT KEY LABELKey identifier to create the SSL connection
SSL CONTROL

Possible values:

  • EXPLICIT (default): the client protects the data channel.
  • IMPLICIT: the partner decides if the data channel must be protected or not.
    When selecting “Implicit”, the DATA PROTECTION value (above) will be set to CLEARTEXT.
DATA PROTECTION

Force data channel protection. Possible values:

  • PROTECTED (default)
  • CLEARTEXT
SSL AUTHENTICATION PROTOCOL

Select the SSL authentication protocol:

  • ALL

  • ONLY SPECIFIC VALUES:

    • SSLv3
    • TLSv1
    • TLSv1_1
    • TLSv1_2
    • TLSv1_3
ACCEPTED CIPHER SUITES

Select the cipher suites. Possible values:

MATCH SERVER HOSTNAME

Specify whether the client should verify that the server’s certificate matches the hostname (the HOST value) it is connecting to.

  • Enabled: the client checks that the server’s certificate Distinguished Name (DN) includes the IP address or hostname that was contacted.
  • Disabled (default): no hostname verification is performed.
MAX RETRIESMaximum number of retries. If this field is empty or set to 0, no retries will be executed and the job will be set to Failed if the first attempt is not successful. A high value corresponds to a high number of retrying attempts.
RETRY INTERVALThis field will appear only if you have set the maximum numbers of retries to 1 or greater.
Time (in seconds) waited before retrying executing a job. The lower the value, the more frequent the retrying attempts. If this field is empty or set to 0, no retries will be executed and the job will be set to Failed if the first attempt is not successful.
CONFIGURATION TESTUse this section to test that the Cluster and the STENG are connected correctly. Select a Cluster and a STENG you want to test and click the TEST button. Data One automatically selects a Cluster and a STENG to test the connection. Note that a Cluster will be selected only if it is the only one available.
A message with a green check will confirm a successful connection. A message with a red exclamation mark will warn about an unsuccessful connection. The message also details the reason why the connection fails.
The connection might not be successful for different reasons, each of them depending on the transport type and the configuration.
The first time you try to test the connection, if trusting certificates are missing, an error message detailing the unsuccessful connection will appear. In this case, go to Setup → Untrusted Cache → Certificates tab and trust the relevant certificates.
Note that trusting certificates in the Untrusted Cache page may not be sufficient to establish a successful connection. Refer to the Untrusted Cache section of this documentation for all the details.
--- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.primeur.com/data-mover-1.21/transfer-protocols-and-connectors/client-connections/client-connection-ftps.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.