---
title: "About SFTP prerequisites"
slug: "about-sftp-prerequisites"
description: "Set up SSH File Transfer Protocol for Supermetrics with the right SFTP server, user permissions, and IP allowlisting to ensure smooth data transfers."
updated: 2025-11-13T14:04:06Z
published: 2025-11-13T14:04:06Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.supermetrics.com/llms.txt
> Use this file to discover all available pages before exploring further.

# About SFTP prerequisites

To start using SSH File Transfer Protocol (SFTP) as a Supermetrics destination, some requirements need to be met. These prerequisites ensure that a working connection can be set up to [successfully transfer data to your SFTP server](/v1/docs/how-to-configure-an-sftp-server-destination).

## Prerequisites

### SFTP server

You need an SFTP server in place before you can create an SFTP destination for Supermetrics. Learn more about how to set up a server with your operating system:

- [LinuxTeck: How to set up an SFTP server on Rocky Linux 8](https://www.linuxteck.com/sftp-server-on-rocky-linux/)
- [DigitalOcean: How to enable SFTP without shell access on CentOS 7](https://www.digitalocean.com/community/tutorials/how-to-enable-sftp-without-shell-access-on-centos-7)
- [Techtrix: How to enable SFTP on a Windows server](https://techtrix.co/how-do-i-enable-sftp-on-windows-server/)

Note that if your SFTP server runs into quota issues, it could cause your Supermetrics to fail. Make sure it’s set up correctly to avoid these issues.

### Permissions

You can connect to your SFTP server using a legacy password or the recommended key-pair method.

#### Method 1: Username and password (Deprecated)

You can connect using a standard username and password, though this method is less secure and no longer recommended.

#### Method 2: Key pair (Recommended)

This is the most secure method, authenticating with a private SSH key instead of a password.

Prerequisites for key pair:

1. **Generate a key pair**: You must generate an SSH key pair (a public key and a private key) on your own machine.
2. **Add public key to server**: You must add your public key to the authorized keys file for the user on your SFTP server and ensure the server is configured to allow public key authentication. The location of this file depends on your server's operating system and software:
  - Linux example: On most OpenSSH servers, the file is typically `~/.ssh/authorized_keys`.
  - Windows example: If you're using OpenSSH on Windows, the file might be at `C:\Users\<username>\.ssh\authorized_keys`. Other SFTP server software (like FileZilla Server) will have a different method for adding keys in its own user management interface.
  - Please consult your specific server's documentation for the correct procedure.
3. **Provide private key**: In the Supermetrics UI, you will need to provide:
  - Username: The user you’re connecting as.
  - Private key: The full text of your private key (such as the content of your `id_rsa` file).

Only the following key formats are supported:
    - Common
    - MontgomeryPrivate
    - MontgomeryPublic
    - OpenSSH
    - PKCS1
    - PKCS8
    - PuTTY
    - XML
    - libsodium
  - Private key passphrase (optional): If you set a passphrase when creating your key, you must provide it here.

#### User Permissions

Regardless of which authentication method you use, the user must have permissions to:

- Write files to the SFTP destination
- Delete files from the SFTP destination
- Create and navigate to sub-folders

If the user doesn’t have permission to create and navigate sub-folders, they need to leave the “Upload Path” field empty when [creating the destination](/v1/docs/how-to-configure-an-sftp-server-destination).

When you click **Test**, our connection test writes a file to your SFTP destination and tries to delete it afterward. This makes sure Supermetrics can transfer data to the right place.

If the user doesn’t have permission to delete files, the connection test will leave empty files in your SFTP server.

### IP allowlisting

You need to allowlist select IP addresses if your organization only allows access from selected networks. Add [these Supermetrics IP addresses](/v1/docs/about-ip-address-allowlisting-for-data-warehouse-destinations) to your allowlist.

## More resources

- [How to configure an SFTP server destination](/v1/docs/how-to-configure-an-sftp-server-destination)
- [How to create a destination](/v1/docs/how-to-connect-to-a-data-warehouse-destination)
- [How to create a transfer](/v1/docs/how-to-create-a-transfer)