SSLFTPClientRootCertificates Property

public SSLFTPCertificate[] RootCertificates { get; }

Public ReadOnly Property RootCertificates As SSLFTPCertificate()
	Get

public:
property array<SSLFTPCertificate^>^ RootCertificates {
	array<SSLFTPCertificate^>^ get ();
}

member RootCertificates : SSLFTPCertificate[] with get

Property Value

If ServerValidation is set to Automatic or AutomaticNoNameCheck then the system will attempt to validate the server's certificate. For a certificate to be validated it must either (1) be installed as a root certificate, or (2) the base of the chain of certificates that it contains must be a root certificate.

Root Certificates work through "Chains of Trust". In other words, if X trusts Y, and Y trusts Z, then X can trust Z. In this case, X is the user of the FTP-client, Y is a Certification Authority (CA), and Z is the FTP server. So, in order for the FTP-client to be able to trust the FTP-server, the server should have a certificate issued by a CA, and the client should have the CA's certificate loaded as a root certificate. When a client connects to a server, the server will provide the client with its certificate. This certificate will contain a copy of the CA's certificate and contain data which certifies that the server's certificate could only have been issued by this CA. The client can now match the CA's certificate with the root certificates that it holds and then deduce whether or not the server is trustworthy. Client certificates work similarly, but in reverse to the above description.

Installing certificates: A certificate may be installed on the system using the Internet Properties settings, which may be accessed from the Windows Control Panel.

Reference