How to Access SFTP

SFTP is a secure way to share files. CatapultEMS and CatapultCONNECT may use SFTP to receive exports from your HR or Student Information System (SIS).

How to Manually Upload a File

  1. Install an SFTP client app such as

  2. Open the SFTP app and enter the access details provided by your Catapult representative.

  3. It may prompt you to confirm the host key fingerprint. Feel free to compare against the host key fingerprints listed below.

  4. The app is divided into two sides. The left side shows the files on your computer, and the right side shows the files on the CatapultEMS server. Drag the file you want to upload to the right side.

Host key fingerprints

When you connect to sftp.catapultems.com, the host key fingerprint (as of July 2025) should match one of the following. Some software may display one or two equals signs (=) on the end.

  • Fingerprint "SHA256:FlMxKvaEx3nqhbM8OpnTSsce2Q0oqXNDTBwHgku13c4"
    • Algorithms "rsa-sha2-256, rsa-sha2-512"
  • Fingerprint "SHA256:k48FuPCoPAGXPudLo6pS+ItLSBkPRoDAgl2fGZKOg1U"
    • Algorithms "ecdsa-sha2-nistp256"
  • Fingerprint "SHA256:QH4hXdK35NThQ7hUSPyqF+m1BhpI0eAm1sPxSLwdEjE"
    • Algorithms "ssh-ed25519"

Folder Structure

Generally, files uploaded to the main folder get imported/processed each night. The file name must be exact for it to get imported. 

Archive

The Archive folder includes imported files over the last seven days.

Logs

The Logs folder includes any error messages produced during import. The folder includes a file per day for the last seven days.

For help with specific errors, see Troubleshoot errors in the import log.

Automation

Manual uploads can help troubleshoot (particularly when you first create the CSV files). But in the long run, automating uploads each night insures your data in CatapultEMS stays up-to-date.

If your Student Information System or HR system offers automated uploads, use them.

As a last resort, if your provider can export to your local file system, but not to SFTP, WinSCP can automate uploads. If you write your own automation using WinSCP or something else, make sure it runs on a computer that remains on overnight and when you are on vacation. Also ask Catapult about receiving import emails, so you know if it stops working.