Enable HTTPS for Content Search
Version:
If you are using Solr for content search, make sure that you are using HTTPS. HTTPS (for Solr) is not enabled by default. For more information, see the following documentation
Platform Administration and Architecture
- Securing Experience Manager
- Securing Experience Platform
- Database security recommendations
- Configure SQL Always Encrypted for the xDB Collection database
- Walkthrough: Configuring Always Encrypted for the Sitecore Cortex Processing databases using Azure Key Vault
- Walkthrough: Configuring Always Encrypted for the Sitecore Cortex Processing databases using Windows Key Store
- Walkthrough: Setting up Always Encrypted for the suppression list in EXM
- Allow or deny users access to web resources
- Change the administrator password
- Change the hash algorithm for password encryption
- Configure API authentication keys in a scaled environment
- Configuring your firewall
- Enable and disable an administrative tool
- Disable client RSS feeds
- Disable SQL Server access from XSLT
- Enable or disable client certificate authentication for XP service roles
- Replace a Sitecore client certificate in Azure
- Enable FIPS
- Increase login security
- IP hashing
- Limit access to XML, XSLT, and MRT files
- Limit access to PhantomJS
- Protect media requests
- Remove header information from responses sent by your website
- Restrict access to the client
- Secure Sitecore.Services.Client
- Secure the file upload functionality
- Secure the Telerik controls
- Separate Content Management and Content Delivery servers
- Enforce a strong password policy
- Protect the connection string passwords from unauthorized access
- Updates and disaster recovery
- Application and database permissions