Content Management (CM)
The Content Management (CM) role enables authors to create, manage, and publish content.
Supported infrastructure
You can host the CM role on:
Refer to the Sitecore compatibility table for compatible versions.
Reference structure
The CM role has its place in the Sitecore reference structure. It can be referenced by other roles, and it can also reference other roles.
Referenced by
The CM role is referenced by the following roles:
References
The CM role references the following roles:
Storage roles
| Role name | Connection string name | Port | Type | Notes |
|---|---|---|---|---|
| Master database | master | 1433 | SQL | |
| Core database | core | 1433 | SQL | |
| Security database | security | 1433 | SQL | |
| Web database | web | 1433 | SQL | |
| xDB Reporting database | reporting | 1433 | SQL | Connection required for reporting database re-build even if you having a dedicated xDB Reporting role. |
| Message Bus | messaging | 1433 | SQL | If you install using SIF, SQL is the default provider. Not applicable to Experience Manager. |
| 443 | Azure Service Bus | If you install Sitecore on Azure, Azure Service Bus is the default provider. Azure Service Bus is available in 9.2 and later. | ||
| Forms database | experienceforms | 1433 | SQL | The connection strings for the Forms database and for file storage are the same by default. You can create your own file storage provider with a custom connection string. See Manage file storage for forms and The security roles in Sitecore Form for details. |
| EXM database | exm.master | 1433 | SQL | Not applicable to Experience Manager |
| Private Session State Store | session | 1433 | SQL | Optional, for SQL session state provider |
| 6379 | HTTP | Optional, for Redis session state provider | ||
| Shared Session State Store | sharedsession | 1433 | SQL | Optional, for SQL session state provider |
| 6379 | HTTP | Optional, for Redis session state provider |
On-premise application roles
| Role name | Connection string name | Port | Type |
|---|---|---|---|
| xConnect Collection service | xconnect.collection | 443 | HTTPS |
| xConnect Collection Search service | xconnect.search | 443 | HTTPS |
The following client certificates and keys are required in a secure production environment:
| Role | Connection string name | Type |
|---|---|---|
| xConnect Collection service | xconnect.collection.certificate | Certificate |
| xConnect Collection Search service | xconnect.search.certificate | Certificate |
Azure application roles
On XP1 topologies deployed on Azure, the xConnect Collection Search service has a dedicated connection string. This is to separate the collection requests from the search and indexing requests. The xConnect Collection Search service is hosted under a basic hosting plan which might not have enough resources for collection, search, and indexing requests.
| Role name | Connection string name | Port | Type | Notes |
|---|---|---|---|---|
| xConnect Collection service | xconnect.collection | 443 | HTTPS | Hosted on a resource intensive plan. |
| xConnect Collection Search service | xconnect.search | 443 | HTTPS | Hosted on a basic plan. |
The following client certificates and keys are required in a secure production environment:
| Role | Connection string name | Type | Notes |
|---|---|---|---|
| xConnect Collection service | xconnect.collection.certificate | Certificate | |
| xConnect Collection Search service | xconnect.search.certificate | Certificate |
Application roles for both on-premise and Azure
| Role name | Connection string name | Port | Type | Notes |
|---|---|---|---|---|
| Reference Data service | xdb.referencedata.client | 443 | HTTPS | |
| Marketing Automation Operations service | xdb.marketingautomation.operations.client | 443 | HTTPS | |
| Marketing Automation Reporting service | xdb.marketingautomation.reporting.client | 443 | HTTPS | |
| xDB Reporting | N/A - see notes | 443 | HTTPS | The xDB Reporting service URL is configured in |
| xDB Processing | N/A - see notes | 443 | HTTPS | The xDB Processing service URL is configured in |
| EXM Dispatch | N/A - see notes | 443 | HTTPS | |
| Content Publishing | N/A - see notes | 80/443 | HTTP/HTTPS | Service url is configured in the |
| Authoring | N/A - see notes | 5000 | HTTPS | Service url is configured in the |
| Sitecore Cortex™ Reporting service | sitecore.reporting.client | 443 | HTTPS |
If you have a dedicated xDB Reporting role or xDB Processing role, you must include the following API key in the CM connection strings configuration file:
| Role | Connection string name | Type | Notes |
|---|---|---|---|
| xDB Reporting | reporting.apikey | Unique string | Required if you use a dedicated xDB Reporting role. Not required if CM connects directly to the reporting database. |
| xDB Processing |
The following client certificates and keys are required in a secure production environment:
| Role | Connection string name | Type | Notes |
|---|---|---|---|
| Reference Data service | xdb.referencedata.client.certificate | Certificate | |
| Marketing Automation Operations service | xdb.marketingautomation.operations.client.certificate | Certificate | |
| Marketing Automation Reporting service | xdb.marketingautomation.reporting.client.certificate | Certificate | |
| Sitecore Cortex™ Reporting service | sitecore.reporting.client.certificate | Certificate | |
| EXM Dispatch | EXM.CryptographicKey | Key | |
| EXM Dispatch | EXM.AuthenticationKey | Key | |
| Sitecore Identity | sitecoreidentity.secret | Key |
Search indexes
The Content Search provider determines how the CD role connects to the indexes. Sitecore supports Azure Search and Solr.
| Index | Port, Solr | Port, Azure Search | Type | Notes |
|---|---|---|---|---|
| Master index | 8983 | 443 | HTTPS | |
| Core index | 8983 | 443 | HTTPS | |
| Web index | 8983 | 443 | HTTPS | |
| FXM Web index | 8983 | 443 | HTTPS | Only for XP installations |
| Web Marketing Definitions index | 8983 | 443 | HTTPS | Only for XP installations |
| Web Marketing Assets index | 8983 | 443 | HTTPS | Only for XP installations |
| FXM Master index | 8983 | 443 | HTTPS | Only for XP installations |
| Master Marketing Definitions index | 8983 | 443 | HTTPS | Only for XP installations |
| Master Marketing Assets index | 8983 | 443 | HTTPS | Only for XP installations |
| Testing index | 8983 | 443 | HTTPS | Only for XP installations |
| Suggested Test index | 8983 | 443 | HTTPS | Only for XP installations |
| Personalization index | 8983 | 443 | HTTPS | Only for XP installations |
For more information, see:
Cloud Services
| Role Name | Port | Type | Endpoint URL |
|---|---|---|---|
| IP Geolocation | 443 | HTTPS | geoip-ces.cloud.sitecore.net |
| Device Detection | 443 | HTTPS | devicedetection-ces.cloud.sitecore.net |
| E-mail Cloud | 443 | HTTPS | Multiple endpoints |
For more information, see:
Other
The CM role includes a reference to the Package Management Service via the PackageManagementServiceUrl connection string.
Privacy and security
The CM role handles personal data in the following ways:
- Handles authentication and authorization of content editors and other business users.
- Allows the management of website user accounts and authorization.
- Hosts the business tools for accessing and managing Experience Database contacts and interactions.
- Hosts the Experience Profile which shows Commerce customer and order information.
Refer to the Security Guide for steps to secure the CM role.