---
id: post/demiliani-com/13640
type: post
title: "Dynamics 365 Business Central: using SFTP from AL (the native way)"
summary: Business Central 2026 Wave 1 introduced a native SFTP Client codeunit for connecting to SFTP servers from AL code with multiple authentication methods, though Microsoft announced in April 2026 that this module would be removed due to platform hardening requirements.
tier: community
language: en
tags:
  - sftp
  - al code
  - authentication
  - file transfer
  - security
  - ssh
system: integration
review:
  state: reviewed
  by: opus
  at: "2026-10-08T01:55:36.135Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-post: 1
  input_hash: 2a671fba54731d404586b98849ef758062ac0e0e245999d1bde04dab0c49e5a2
evidence:
  - kind: blog
    url: https://demiliani.com/2026/04/13/dynamics-365-business-central-using-sftp-from-al-the-native-way/
    title: "Dynamics 365 Business Central: using SFTP from AL (the native way)"
    date: "2026-04-13"
    commit: null
    t: null
    quote: null
  - kind: blog
    url: https://demiliani.com/2026/04/13/dynamics-365-business-central-using-sftp-from-al-the-native-way/
    title: "Dynamics 365 Business Central: using SFTP from AL (the native way)"
    date: "2026-04-13"
    commit: null
    t: null
    quote: With Dynamics 365 Business Central 2026 Wave 1 release (v28) Microsoft introduced a new SFTP Client module in System Application
  - kind: blog
    url: https://demiliani.com/2026/04/13/dynamics-365-business-central-using-sftp-from-al-the-native-way/
    title: "Dynamics 365 Business Central: using SFTP from AL (the native way)"
    date: "2026-04-13"
    commit: null
    t: null
    quote: You must always add the fingerprint of the server you want to connect to, before connecting.
links:
  learn: []
  objects:
    - object/codeunit/9762
    - object/interface/isftp-file
    - object/codeunit/9764
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
post_id: "13640"
source_id: demiliani-com
source_name: Stefano Demiliani
url: https://demiliani.com/2026/04/13/dynamics-365-business-central-using-sftp-from-al-the-native-way/
published_at: "2026-04-13T07:50:43.000Z"
author: Stefano Demiliani
full_text: false
words: 682
quotes:
  - text: With Dynamics 365 Business Central 2026 Wave 1 release (v28) Microsoft introduced a new SFTP Client module in System Application
    why_it_matters: Establishes that this is a new native capability added in the 2026 Wave 1 release
  - text: You must always add the fingerprint of the server you want to connect to, before connecting.
    why_it_matters: Critical security requirement for establishing trusted SFTP connections
code_objects_mentioned:
  - codeunit SFTP Client
  - interface ISFTP File
  - codeunit SFTP Operation Response
systems:
  - integration
  - development
  - platform
versions_mentioned:
  - 2026 Wave 1
  - v28
preview:
  embeddable: true
  frame_url: https://demiliani.com/2026/04/13/dynamics-365-business-central-using-sftp-from-al-the-native-way/embed/
  image: https://demiliani.com/wp-content/uploads/2026/04/al_sftp_00.png
  image_alt: null
  image_w: 713
  image_h: 298
  site_name: Stefano Demiliani
  favicon: https://demiliani.com/wp-content/uploads/2022/09/sd_wordpress_logo.png?w=32
  probed_at: "2026-10-07T11:50:48.072Z"
---

# Dynamics 365 Business Central: using SFTP from AL (the native way)

[Read the post](https://demiliani.com/2026/04/13/dynamics-365-business-central-using-sftp-from-al-the-native-way/) · Stefano Demiliani (Stefano Demiliani, MVP) · 2026-04-13 · 682 words · tier community · reviewed (checked by Opus)

> Business Central 2026 Wave 1 introduced a native SFTP Client codeunit for connecting to SFTP servers from AL code with multiple authentication methods, though Microsoft announced in April 2026 that this module would be removed due to platform hardening requirements.

## Key points

- The SFTP Client codeunit in the System Application wraps the SSH.NET library so AL code can talk directly to SFTP servers
- Supported sign-in methods are username with password, or username with a private key, with or without a passphrase
- You must register the server's fingerprint, a short hash of its public key, before connecting; this guards against man-in-the-middle attacks
- GetFileAsStream downloads a file, ListFiles lists a path, and DeleteFile removes a remote file; the connection is stateful and needs Disconnect when done
- An April 27, 2026 update says Microsoft will remove or deprecate the module, so Azure Functions and similar alternatives are needed again

## Quotes

- "With Dynamics 365 Business Central 2026 Wave 1 release (v28) Microsoft introduced a new SFTP Client module in System Application" (Establishes that this is a new native capability added in the 2026 Wave 1 release)
- "You must always add the fingerprint of the server you want to connect to, before connecting." (Critical security requirement for establishing trusted SFTP connections)

## AL objects mentioned

As named in the post. A name that matches one object page by exact type and name links to it; the others stay as named.

- [codeunit 9762 "SFTP Client"](../../objects/codeunit/9762.md)
- [interface "ISFTP File"](../../objects/interface/isftp-file.md)
- [codeunit 9764 "SFTP Operation Response"](../../objects/codeunit/9764.md)

## Context

- Features: SFTP Client module, SSH-2 library integration, Public key authentication, Password authentication, File download via GetFileAsStream, Directory listing via ListFiles, File deletion via DeleteFile
- Versions: 2026 Wave 1, v28

Source: Stefano Demiliani, community blog. Summary, key points and quotes are derived (CONTENT-NOTICE.md); read the original for the full text.