2.15.0+ A certificate group is a named collection of X.509 certificates used to secure FTP over TLS connections. Each FTP endpoint references a certificate group — either the default (unnamed) group or a named one. This allows different endpoints to use different certificates (e.g. separate certificates per domain).

ftp:
  certificateGroups:
    # default certificate group (no name)
    - certificates:
        - 'path/to/cert'
      
    # named certificate group
    - name: rebexnet
      certificates:
        - 'path/to/cert'
        - 'path/to/key'

ftp.certificateGroups[].name

string | null

Certificate group name. If not specified, the group is considered the default certificate group. Each group must have a unique name.

ftp.certificateGroups[].certificates

string[]

Paths to certificate files. See Certificate path format for more information.

2.15.3+ Self-signed X.509 certificates can be generated using the burusftp certgen command.