---
schema_version: "1"
id: 697a92fecb699ea0f8a526c4d49e9e50023ae10a19b05e057fa072ddf876ef8f
title: Set Up an SFTP Target Connection
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/data/264-0-0/c360_a_set_up_an_sftp_target_connection.md
canonical_url: https://help.salesforce.com/s/articleView?id=data.c360_a_set_up_an_sftp_target_connection.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: e142015bf6d79118c0cebfff7afc88f5409e50de38485058d2d933fa27e2f66e
description: Create an SFTP connection in Data 360 using your own SFTP server that’s not provided or used by Marketing Cloud Engagement.
products:
  - Data 360
release: "264"
---
# Set Up an SFTP Target Connection

Create an SFTP connection in Data 360 using your own SFTP server that’s not provided or used by Marketing Cloud Engagement.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: <strong>All Editions</strong> supported by Data 360. See <a href="https://help.salesforce.com/s/articleView?id=data.c360_a_dc_editions.htm&amp;language=en_US" target="_blank">Data 360 edition availability</a>.</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:left;vertical-align:top;" id="d35877e64">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d35877e64 ">To access Data Cloud Setup</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d35877e64 ">
              <p>System admin profile OR </p>
              <p style="margin-bottom:0;">Data Cloud Architect permission set</p>
            </td>

          </tr>
        </tbody>
      </table>

1. In Data 360, select **Data Cloud Setup**.
2. Under External Integrations, select **Other Connectors**.
3. Click **New**, and click **Target**.
4. Select **Secure File Transfer (SFTP)**, and click **Next**.
5. Enter a connection name, connection API name, and enter the authentication details.
    
     
    | Field | Description |
    | --- | --- |
    | Authentication Method | Select SSH Private Key or SSH Private Key & Password. |
    | Username | The SFTP account used to authenticate the connection. |
    | Password | The password to authenticate the user. |
    | SSH Private Key | To secure access, create an SSH public and private key. The public key is used on the SFTP server to encrypt the data before sending it to Data Cloud. The private key is entered in your SFTP connection details and Data Cloud uses it to decrypt your data. |
    | Passphrase (optional) | The passphrase to protect your private key. |
    | Host Name | The SFTP server’s name or address. |
    | Port: 22 (default) | The port that the SFTP server is running on. |
    | PGP Encryption (optional) | The public key is in RSA format. PGP encryption is supported for CSV and JSON file formats, but not Parquet. |
    | Parent Directory | The base directory where your activation target child folder resides. The directory you select must have Write permission. Also, file rename permission is required for activated files on the SFTP server. |
6. To review your configuration, click **Test Connection**.
7. Click **Save**.

After the connector details are accepted, the connection is created and ready to use in activation targets. Change the SFTP credentials and encryption keys periodically as per your security policy.

SSH keys consist of a Public Key and a Private Key (with an optional passphrase). SSH key pair generation can be done with multiple SSH key generator utilities. Use an SSH key generator utility such as PuTTY to generate the SSH key pair. The SFTP connector supports RSA-based keys up to 4096-bit encryption. For example, the command line entered in a terminal to create the key-pair using PuTTY is <ssh-keygen -b 4096 -t rsa>.

#### See Also

- [_Salesforce Help_: Allowlisting](https://help.salesforce.com/s/articleView?id=data.c360_a_allowlist.htm&release=264.0.0&type=5 "An allowlist defines things that a system trusts. It’s used to control allowed traffic and rejects undefined traffic and can be applied at different layers of the OSI Model. Here’s how the allowlist works at the application and network layers for Data 360.")
- [_Salesforce Knowledge_: IP Addresses and Domains to Allow](https://help.salesforce.com/s/articleView?id=000384438&type=1&language=en_US)
- [_Salesforce Help_: Create a File Storage Activation Target](https://help.salesforce.com/s/articleView?id=data.c360_a_create_cloud_file_storage_activation_target.htm&release=264.0.0&type=5 "Create an activation target in Data 360 to publish segments and batch data model objects (DMOs) to external file storage activation platforms like Amazon S3, SFTP, Google Cloud Storage (GCS), or Microsoft Azure blob storage.")