I am establishing service with an industry data provider and they require the use of FTPS (FTP/TLS) for the connection to their data repository. They requested that I purchase an SSL certificate for this purpose and provide them with the "public SSL cert" so that they can configure my account on their servers.
Unfortunately, their technical folks are not native English speakers and the terminology they use is a bit confusing. Here is the text of their request. If anyone can shed some light on what they are asking for and how to get it to them it would be greatly appreciated. (SMT is the data service provider)
First you can understand the SSL handshake process between SMT and Client(REP/Thirdparty). Client needs to purchase both private key and the corresponding public key from CA authorized companies, Client will provide only the public SSL cert(.pem or crt or cer) to SMT. SMT will create FTP account and update that public SSL cert on their client's ftp account.
Once done FTP/API account creation, SMT will share the details to client. Client needs to configure Core FTP client tool as per the document and select the corresponding private key(.p12 or .pfx) while connecting FTP account.
These certificates(SMT-SSL public cert, Client-SSL private cert) facilitate the mutual authentication of the ftps client computer and the SMT FTP server, and set up a secure channel between those devices encrypted via SSL.