• CSI Documentation
• Working with CSI
  • Support Practices
  • Supported Operating Systems
• Linux Build Services
  • Overview of Linux Environment
  • Getting Started
    • Prerequisites
    • Firewall Setup
    • Get a Foreman Org
    • Setup Wolftech OU (optional)
    • Configure Org Defaults
    • Add Users to Your Org
  • Building Hosts
    • Overview
    • Hardware
    • New host creation
    • Network Interfaces
    • Node Classification
    • Other goodies
  • Using Puppet
    • Overview
    • Environments
    • Branches and Updates
    • Workstation Setup
    • Encrypted Hiera
    • Puppet Module References
• Software Repositories
  • Overview
  • Public Mirrors
  • Private Mirrors
  • Hosted Mirror Services
  • Red Hat Install Media
• Satellite deployment
  • Overview
  • Satellite Hosts
  • Registration Guide
  • Satellite Interface
  • Troubleshooting RHEL 6
  • Troubleshooting RHEL 7
• NTP time
  • Overview
• SFTP/SCP
  • SFTP/SCP Service
  • SFTP/SCP On Call Support
• Monitoring
  • Overview (SysNews/Nagios/Pager)
  • Problems (SysNews/Nagios)
  • Zabbix Information (Zabbix/OnCall/Iris)
  • Zabbix Monitoring FAQ (Zabbix/OnCall/Iris)
• AFS/Auristor Filestore
  • Overview
• MySQL / MariaDB
  • Overview
• Proxy
  • Overview
  • Datacenter proxies
  • PCI-DSS proxies
  • Proxy service calls
• Load Balancing
  • Overview
• ERP
  • Overview
  • IPA Auth
  • MTA Mail Relays
  • Secure File Transfer
  • End-of-Support Systems
• PCI
  • Overview
  • Web Proxy
  • PCI Linux Builds
    • Migration from PE
    • Move a host from PE
    • New PCI hosts
    • Puppet Module for PCI
• CSI Internal docs
  • Operational docs
  • Updating Documentation
  • Auditing
  • Tag summaries for CSI docs
  • Pager Admin Commands
  • Nagios Config for Windows
  • SSL Certificate Management
  • Build Environment
    • CSI - Make an org
    • CSI - Make a dev environment
    • Foreman templates
    • Code Flow
    • LDAP recipes for AD
  • Firewall Information
    • Avamar
    • Satellite
    • Foreman + Puppet
  • On-Call Playbook
    • General OS checks
    • role::oit_linux::foreman
    • role::oit_linux::puppet_ca
    • role::oit_linux::puppet_master
    • role::oit_linux::tftpserver
    • Sysnews monitoring servers
    • Legacy Proxy Servers
    • PCI timeserver
    • Satellite servers

Technical Architecture : Uses VIP on FortiADC (ftp.ncsu.edu) and 2 load balanced FTP servers (ftp100.unity.ncsu.edu, ftp200.unity.ncsu.edu). TLS keys on the servers are the same.

Protocols supported : SFTP, SCP, FTPS

Service update as of 6/22/2020

• Access to this service will now require encrypted protocols (SFTP, SCP, FTPS) and must be coming from a campus IP unless the NCSU VPN is in use.
• Support for anonymous FTP has been deprecated.
• All connections to the service should be through ftp.ncsu.edu rather than connecting directly to the FTP servers. Direct access to the servers is not available

Transitional issues

• When current users connect to the updated service for the first time, they will need to accept the updated SSL key.
• Automated processes using this service will need to be checked manually to confirm execution is not waiting on a prompt to accept a key.